Table of Contents

1. Challenge

   Create a VPC

   Create a VPC with the following CIDR Block Range (10.99.0.0/16)

   • Navigate to the VPC service in the AWS Console
   • Navigate to "your vpcs"
   • Click on Create VPC
   • Enter VPC name and CIDR block range
   • Create an Internet Gateway and attach it to your VPC.
2. Challenge

   Create Six Subnets

   Create six subnets in the VPC you just created: one pair of subnets for the DMZ layer, one pair for the App layer, and one pair for the DB layer. Each pair should be split between AZs.

   • In the VPC console, navigate to "subnets".
   • Select "Create subnet".
   • Fill in the form, making sure to select the proper VPC, AZ, and CIDR block range.
   • Repeat five more times to create six total subnets.
3. Challenge

   Create a NAT Gateway

   Create a NAT Gateway and provide it with a route to the Internet via the public Route Table

   • In the VPC console, navigate to "Nat Gateways"
   • Click on "Create Nat Gateway"
   • Fill out the form, making sure to choose the appropriate subnet AND generating an EIP address
4. Challenge

   Create Three NACLs and Associate Them with Subnets

   Create three NACLs and associate each to one of the subnet groupings (DMZ, App layer, and DB layer subnets).

   Create three NACLs:

   • In the VPC console, navigate to "Network ACLs".
   • Click on "Create Network ACL".
   • Fill out the form, making sure to select the proper VPC.
   • Repeat twice more to create a total of three NACLs.

   Associate NACLs with subnets:

   • Select one NACL and navigate to the "Subnet Associations" tab.
   • Click on "Edit".
   • Select the two subnets that need to be associated with this NACL.
   • Click "Save".
   • Repeat twice more, associating the remaining NACLs with the remaining subnets.