AWS Certified Advanced Networking - Specialty (ANS-C01) Domain 1

Network Design

Official Exam Guide: Domain 1: Network Design

Skill Builder: AWS Certified Advanced Networking - Specialty Exam Prep

---

Domain Overview

Domain 1 (30% - largest domain) focuses on edge services, DNS solutions, load balancing, logging/monitoring, hybrid connectivity, and multi-account/multi-Region connectivity.

---

Task 1.1: Design edge network services for global architectures

Essential Documentation:

• Amazon CloudFront Developer Guide
• AWS Global Accelerator Developer Guide
• CloudFront with ELB Integration

---

Task 1.2: Design DNS solutions (public, private, hybrid)

Essential Documentation:

• Amazon Route 53 Developer Guide
• Route 53 Resolver
• Route 53 Routing Policies
• Route 53 DNSSEC

---

Task 1.3: Design load balancing solutions

Essential Documentation:

• Application Load Balancer Guide
• Network Load Balancer Guide
• Gateway Load Balancer Guide
• AWS Load Balancer Controller for Kubernetes

---

Task 1.4: Define logging and monitoring requirements

Essential Documentation:

• Amazon CloudWatch Monitoring
• Transit Gateway Network Manager
• VPC Reachability Analyzer
• VPC Flow Logs
• VPC Traffic Mirroring

---

Task 1.5: Design hybrid connectivity (on-premises to AWS)

Essential Documentation:

• AWS Direct Connect User Guide
• AWS Site-to-Site VPN User Guide
• Direct Connect Gateways
• Transit Gateway Connect

---

Task 1.6: Design multi-account/multi-Region/multi-VPC connectivity

Essential Documentation:

• AWS Transit Gateway User Guide
• VPC Peering Guide
• AWS PrivateLink Guide
• VPC Sharing

---

AWS Service FAQs

• Amazon Route 53 FAQs
• AWS Direct Connect FAQs
• AWS Transit Gateway FAQs
• AWS Global Accelerator FAQs

---

Study Tips

1. Master BGP thoroughly - AS_PATH, MED, Local Preference, communities, route propagation, active/passive configurations.

2. Learn Transit Gateway patterns - Hub-and-spoke, segmentation with route tables, peering, Connect attachments for SD-WAN.

3. Understand Direct Connect - VIFs (public, private, transit), LAG, MACSec, redundancy patterns, failover to VPN.

4. Practice DNS design - Route 53 Resolver endpoints (inbound/outbound), conditional forwarding, split-view DNS.

5. Study load balancer types - ALB (Layer 7, HTTP/HTTPS), NLB (Layer 4, TCP/UDP), GWLB (Layer 3, inline appliances).

---

Note: This is Domain 1 of 4, representing 30% (largest domain) of exam content.