Advanced Level

AWS Certified Advanced Networking Specialty ANS-C01 2026

Design enterprise-grade AWS network architectures — VPC, Transit Gateway, Direct Connect, and beyond — and ace the ANS-C01 specialty exam.

★ 4.8 (300 learners) 60 hrs total 20 modules 3 capstones

AWS EC2 S3 VPC Lambda CloudFormation +3 more

Only 8 seats left · Next batch starts 8 Aug 2026

Download Curriculum

60 hrs: of content
20 modules: in curriculum
19 projects: hands-on builds
Advanced: difficulty

Curriculum covers

Frameworks you'll master

9 tools & frameworks

AWS EC2 S3 VPC Lambda CloudFormation EKS Kubernetes Microsoft Fabric

Course Curriculum

20 modules · 60 hours · 24 live sessions

Additional VPC Features 1 sessions

Section Introduction
Egressonly Internet Gateway (IPv6)
Handson: Egressonly internet gateway for IPv6 outbound traffic
Extending VPC address space
Elastic Network Interface (ENI) deep dive
Bring Your Own IP

VPC DNS and DHCP 1 sessions

Section Introduction How DNS works?
Amazon VPC DNS Server (Route53 Resolver)
VPC DHCP Option sets
Hands On: VPC DNS with Route53 Private Hosted zone
Hands On: VPC DNS with custom DNS server
Introduction to Route53 DNS Resolver Endpoints (Hybrid DNS)

Network Performance and Optimization 1 sessions

Basics of Network performance Bandwidth, Latency, Jitter, Throughput, PPS, MTU
Placement Groups and EBS Optimized EC2 instances
Enhanced Networking
DPDK and Elastic Fabric Adapter (EFA)
Bandwidth Limits inside and outside of VPC
Network I/O credits
Network performance Summary

VPC Traffic Monitoring, Troubleshooting & Analysis 1 sessions

Introduction
VPC Traffic Monitoring with VPC Flow logs
VPC Traffic Mirroring
VPC features for Network Analysis
VPC Reachability Analyzer
Walkthrough: VPC Reachability Analyzer
Walkthrough: VPC Network Access Analyzer

VPC Private Connectivity: VPC Peering 1 sessions

Introduction to VPC private connectivity options
VPC Peering
Hands On: VPC Peering across AWS regions
VPC Peering invalid scenarios

VPC Private Connectivity: VPC Endpoint & Private Link 2 sessions

Introduction to VPC Endpoint and Private Link
VPC Gateway Endpoint
Hands On: VPC Gateway endpoint to access S3 bucket
Introduction to VPC Private Link powered endpoints
VPC Private Link Important to know features
VPC endpoint DNS
Hands On: VPC interface endpoint to access Amazon SQS queue
VPC Endpoint Service
Hands On: Create VPC endpoint service and access through VPC endpoint
Hands On: Accessing VPC endpoint service using Custom Domain Name (DNS)
VPC endpoints security
Other VPC endpoint types Gateway Load Balancer, Resource, Servicenetwork
VPC Endpoint architectures Accessing onpremises services
VPC Endpoint architectures Accessing from peered or connected VPC
VPC Endpoint architectures Accessing from onpremises network
VPC Endpoint architectures Centralized VPC endpoints
VPC Peering vs VPC Endpoints

Transit Gateway 2 sessions

Introduction to Transit Gateway
Transit Gateway VPC attachments and Routing
Hands On: Transit Gateway & VPCs with full routing
Hands On: Transit Gateway & VPCs with restricted routing
Transit Gateway VPC Network Patterns
Transit Gateway AZ considerations
Transit Gateway AZ affinity & Appliance mode
Transit Gateway Peering
Transit Gateway Connect Attachment
Transit Gateway VPN Attachment
Transit Gateway & Direct Connect
Transit Gateway Multicast
TGW Architecture: Centralized egress internet
TGW Architecture: Centralized traffic inspection with Gateway Load Balancer
TGW Architecture: Centralized VPC interface endpoints
13min
Transit Gateway vs VPC Peering
Transit Gateway Sharing

Hybrid Network Basics 1 sessions

Introduction to Hybrid networking
Static Routing vs Dynamic Routing
How Border Gateway Protocol (BGP) works?
BGP Route selection ASPATH, LOCAL_PREF, MED

AWS SitetoSite VPN 1 sessions

Introduction to AWS SitetoSite VPN
IPv4 and IPv6 traffic over AWS SitetoSite VPN
Hands On: Setup AWS SitetoSite VPN
Accelerated SitetoSite VPN (Using AWS Global Accelerator)
VPN NAT Traversal (NATT)
VPN Route Propagation (Static vs Dynamic)
VPN Transitive Routing scenarios
VPN Tunnels Active/Passive Mode
VPN Dead Peer Detection (DPD)
VPN Monitoring
AWS SitetoSite VPN Architectures
AWS VPN CloudHub
EC2 based VPN
AWS Transit VPC architecture using VPN connections

AWS Client VPN 1 sessions

Introduction to AWS Client VPN
Hands On: Setup the AWS Client VPN
Hands On: Accessing VPC internet gateway over the Client VPN connection
Hands On: Client VPN Split Tunnel
Hands On: Accessing VPC peering connection over a Client VPN

Direct Connect (DX) 3 sessions

Introduction to AWS Direct Connect
Direct Connect network requirements
BGP Autonomous System (AS) and ASN
Direct Connect Connection Types Dedicated vs Hosted
Steps to create Direct Connect Connections
Walkthrough: Creating a DX Connection
Introduction to DX Virtual Interfaces (VIFs)
DX Virtual Interfaces (VIF) creation parameters
ipranges.json
Public VIF
Private VIF
Transit VIF
Direct Connect Gateway with Private VIF and VGW
Direct Connect with Transit VIF and TGW
Direct Connect SiteLink
DX Routing policies and BGP communities
Public VIF Routing policies
Public VIF routing scenarios
Public VIF BGP Communities
Private VIF routing policies and BGP communities
DX Link Aggregation Groups (LAGs)
DX Connection Resiliency
DX Failure detection with BFD
DX Security & Encryption (VPN over DX and MACSec)
DX support for MTU and Jumbo Frames
DX Pricing
DX Monitoring using CloudWatch
DX Troubleshooting Layer14
DX Architecture Putting it together
DX Summary and Exam Essentials

AWS Cloud WAN 1 sessions

What is AWS Cloud WAN?
Core Network Policy
HandsOn: Set up AWS Cloud WAN network, Segments & VPC attachments
Connecting Transit Gateway & Direct Connect
AWS Cloud WAN Summary

VPC Lattice 1 sessions

VPC lattice introduction
VPC lattice components Lattice Network, Service, Resource and more
VPC lattice network associations
VPC lattice traffic flow
Hands on: VPC lattice service access with custom domain name
VPC lattice features Good to know
VPC lattice common architectures
VPC lattice section summary

CloudFront 1 sessions

CloudFront Overview
CloudFront Origins
Hands On: CloudFront Origin Groups
CloudFront Origin Headers
CloudFront Origin Security
Hands On: Restrict an ALB to CloudFront
CloudFront and HTTPS
EndtoEnd Encryption in CloudFront
CloudFront Geo Restrictions
CloudFront Functions and Lambda@Edge
Hands On: CloudFront Functions
CloudFront Cleanup
AWS Global Accelerator
Hands On: AWS Global Accelerator

Elastic Load Balancers 2 sessions

ELB Overview
Classic Load Balancer
Application Load Balancer
Network Load Balancer
Connection Idle Timeout
Request Routing Algorithm
Sticky Sessions (Session Affinity)
CrossZone Load Balancing
ELB SSL/TLS
Connection Draining
XForwarded Headers
Hands On: ALB XForwarded Headers
Proxy Protocol
Hands On: NLB Proxy Protocol
gRPC & ALB
Hybrid Connectivity
Security Groups Outbound Rules & Managed Prefixes

Route 53 3 sessions

What is a DNS?
Route 53 Overview
Route 53 Registering a domain
Route 53 Creating our first records
Route 53 EC2 Setup
Route 53 – TTL
Route 53 CNAME vs Alias
Routing Policy – Simple
Routing Policy – Weighted
Routing Policy – Latency
Route 53 Health Checks
Route 53 Health Checks Hands On
Routing Policy – Failover
Routing Policy – Geolocation
Routing Policy – Geoproximity
Routing Policy Traffic Flow & Geoproximity Hands On
Routing Policy IPbased
Routing Policy Multi Value
3rd Party Domains & Route 53
DNS Migration in Route 53
Common Route 53 scenarios
Route 53 Subdomain Zones
Route 53 – DNSSEC
Route 53 Resolvers & Hybrid DNS
Hands On: Route53 Resolvers Part 1 Setting up VPN
Hands On: Route53 Resolvers Part 2 DNS configuration
Hands On: Route53 Resolvers Part 3 Resolver endpoints
Route 53 Logging
Route 53 DNS Firewall
Solution Architectures for DNS

AWS Network Security Services 2 sessions

Introduction to AWS Network Security Services
Recap Security Groups and Network ACL
AWS Web Application Firewall (WAF)
Hands On: CrossSite Scripting (XSS) attack simulation and prevention with WAF
AWS Shield and Shield Advanced (DDoS protection)
Introduction to AWS Network Firewall
AWS Network Firewall VPC and Route tables
AWS Network Firewall Components & Rule groups
Hands On: AWS Network Firewall
The legacy way of using the Network appliances
Gateway Load Balancer and Traffic flow
Hands On: Gateway Load Balancer
Summary: Gateway Load Balancer
Gateway Load Balancer Exam Essentials
AWS Certificate Manager (ACM)
AWS Firewall Manager

AWS EKS Networking 1 sessions

Introduction
Kubernetes Architecture
Amazon EKS Architecture
EKS Cluster Networking
EKS Pod Networking Part 1
EKS Pod Networking Part 2
Security Group in EKS Node and Pod level
Exposing services using Cluster IP, Node Port, Load Balancer and Ingress
EKS Custom Networking Extending IPv4 address space
EKS Networking Summary

AWS Networking Management & Governance 1 sessions

Introduction to AWS Management & Governance Services
Amazon VPC IP Address Manager (IPAM)
AWS CloudFormation
AWS Service Catalog
AWS Config
AWS CloudTrail

Additional Topics 1 sessions

VPC Sharing
AWS Private NAT Gateway
AWS Network architecture for Amazon Workspaces/Appstream 2.0
AWS WaveLength
AWS Local Zones

Download Full Curriculum

After this course, you will

Skills you carry to every job

Design scalable, multi-region VPC architectures with advanced routing and peering
Configure Transit Gateway to interconnect hundreds of VPCs and on-premises networks
Deploy Direct Connect and Site-to-Site VPN for resilient hybrid enterprise connectivity
Implement Route 53 Resolver endpoints for seamless hybrid DNS resolution
Secure network traffic using WAF, Shield Advanced, Network Firewall, and Gateway Load Balancer
Optimize throughput with EFA, enhanced networking, and strategic placement groups
Monitor and troubleshoot traffic flows using VPC Flow Logs, Reachability Analyzer, and Traffic Mirroring
Pass the AWS Certified Advanced Networking Specialty ANS-C01 exam on first attempt

Hands-on learning

What you'll build

3 industry capstone projects · built from scratch · yours to keep

Multi-VPC Transit Hub with Centralized Egress

Build a hub-and-spoke network connecting 10 VPCs via Transit Gateway, centralising internet egress through a shared inspection VPC with AWS Network Firewall, and establishing hybrid connectivity via a simulated Direct Connect using a VPN tunnel.

VPC Transit Gateway AWS Network Firewall Gateway Load Balancer Direct Connect Route 53

Hybrid DNS Resolution Platform

Deploy Route 53 Resolver inbound and outbound endpoints to enable bidirectional DNS resolution between AWS VPCs and a simulated on-premises DNS server, then validate end-to-end name resolution for both private hosted zones and on-premises domains.

Route 53 Resolver VPC Site-to-Site VPN CloudFormation EC2

Zero-Trust Network Security Architecture

Design and implement a zero-trust ingress model using CloudFront with WAF rule groups, an Application Load Balancer with mTLS, VPC PrivateLink for backend services, and Gateway Load Balancer with a third-party virtual firewall appliance.

CloudFront WAF ALB VPC PrivateLink Gateway Load Balancer AWS Certificate Manager

Plus 16 guided mini-projects across the curriculum — Q&A bots, resume screeners, SQL helpers, and more.

Batch Schedule

⚡ Seats filling fast — only 8 remaining across all batches

Available Batches
Batch Type	Schedule	Duration	Next Start Date	Availability
Weekend	Sat & Sun, 10am–1pm	10 weeks	8 Aug 2026	Available
Weekday	Mon–Fri, 7–9pm	8 weeks	10 Aug 2026	Available
Fast-track	Mon–Sun, 6 hours/day	2 weeks	17 Aug 2026	Available

Frequently Asked Questions

What prerequisites should I have before starting this course?

You should hold the AWS Solutions Architect Associate or an equivalent working knowledge of VPC, IAM, and EC2. Hands-on experience with networking concepts (BGP, OSPF, subnetting, TCP/IP) is strongly recommended.

How long does it take to prepare for the ANS-C01 exam?

Most candidates with solid associate-level experience need 8–12 weeks of dedicated study. The course spans 60 hours of instruction, and we recommend an additional 20–30 hours of hands-on lab practice.

Does the course include hands-on labs?

Yes. Every major topic includes a guided hands-on session — from setting up VPN tunnels and Transit Gateway attachments to configuring Route 53 Resolver endpoints and deploying Network Firewall policies.

Which job roles benefit most from this certification?

Network Engineers, Cloud Architects, Solutions Architects, and Infrastructure Engineers who design and operate complex AWS environments will find this certification most valuable.

Is Direct Connect covered in depth?

Absolutely. Direct Connect gets three full sessions covering connection types, Virtual Interfaces (Public, Private, Transit), LAGs, resiliency patterns, BGP routing policies, encryption with MACsec, and troubleshooting layers 1–4.

What support is available if I get stuck during the course?

MindLeap provides live mentor sessions, a dedicated discussion forum moderated by AWS-certified instructors, and a doubt-clearance helpdesk that responds within 24 hours.

Ready to Get Started?