Table of Contents

1. Challenge

   Create a VPC and Public Subnets

   1. Create a VPC with the VPC and more option.
   2. Use the VPV name of Lab_VPC with an IPv4 CIDR block of 10.0.0.0/16.
   3. Set the number of Availability Zones to 1.
   4. Set the number of public subnets to 1.
   5. Set the number of private subnets to 0.
   6. For VPC Endpoints, choose None.
   7. Click Create VPC.
2. Challenge

   Configure Network Firewall

   1. Create Stateful Rule Group (statefulRules): Rules based on domain names: www.example.com and www.facebook.com. Deny HTTP and HTTPS traffic.
   2. Create Stateless Rule Group (statelessRules): Allow all traffic within the VPC (10.0.0.0/16). Drop traffic from 192.0.2.0/24 to any destination.
3. Challenge

   Create Firewall Policy

   1. Firewall Policy (firewallLab): Associate statefulRules and statelessRules rule groups.
4. Challenge

   Deploy Network Firewall

   1. For the Network Firewall Instance (networkFirewallLab): Deploy within the chosen Availability Zone of Lab_VPC. Associate with firewallLab.
5. Challenge

   Configure Route Tables

   Create Route Tables:

   1. igw-route: For directing incoming traffic to networkFirewallLab using Gateway Load Balancer Endpoint.
   2. firewall-route: For directing outgoing traffic from networkFirewallLab to Internet Gateway (IGW).
   3. Associate igw-route with Lab_VPC-subnet to route incoming traffic through networkFirewallLab.
   4. Associate firewall-route with firewall-subnet to route outgoing traffic through the IGW.