AWS Network Security: Securing Public Subnets with HTTPS
Protect your cloud infrastructure by restricting public access to secure HTTPS traffic using load balancers and modern security groups on AWS.
-
💬
AI instructor
Ask about any lesson and get a clear answer instantly, anytime. -
🕐
Start anytime
No schedules or deadlines — learn at your own pace, whenever suits you. -
🌐
In English
Lessons, tasks and certificate — all fully in your language.
About this course
Course contents
6 modules · 32 lessons · 3h
1
AWS Networking Foundations
Understand the basic building blocks of a cloud network.
- Welcome to AWS Network Security
Course overview and the importance of securing public entry points.5 min - What is a VPC?
Defining the Virtual Private Cloud as your isolated network bubble.5 min - Subnets: Public vs. Private
The difference between subnets that can talk to the internet and those that can't.5 min - The Internet Gateway (IGW)
How the IGW acts as the bridge between your VPC and the world.5 min - Route Tables Explained
Directing traffic flow within your network using route table rules.5 min - Cloud Security Fundamentals
The Shared Responsibility Model and why network security is your job.5 min
2
Firewalls: Security Groups and NACLs
Master the two layers of network defense in AWS.
- Introduction to Security Groups
Using stateful instance-level firewalls to control traffic.5 min - Introduction to NACLs
Using stateless subnet-level firewalls for an extra layer of defense.5 min - The Principle of Least Privilege
Granting only the minimum necessary access to your resources.5 min - Configuring Inbound Rules
How to properly open ports for specific traffic types.5 min - Configuring Outbound Rules
Restricting where your resources can send data.5 min - SGs vs. NACLs: A Comparison
Knowing when to use each tool for maximum security.5 min
3
Resource Isolation Strategies
Hide your sensitive data and logic from the public internet.
- Why Isolate Your Backend?
The risks of putting databases and app servers in public subnets.6 min - Designing a Private Subnet
Setting up a subnet with no direct route to the Internet Gateway.6 min - Deploying Private Instances
Launching EC2 instances that are unreachable from the outside.6 min - The Role of NAT Gateways
Allowing private instances to download updates without being exposed.6 min - Restricting Backend Access
Ensuring the backend only talks to the Load Balancer.6 min
4
Application Load Balancers (ALB)
Use an ALB to safely manage incoming web traffic.
- What is an ALB?
The ALB as the single, secure entry point for your application.6 min - Setting Up Target Groups
Grouping your private instances so the ALB knows where to send traffic.6 min - Configuring ALB Listeners
Defining which ports the ALB should watch for incoming requests.6 min - Routing Traffic to Private Subnets
The flow of a request from the public ALB to a private instance.6 min - ALB Health Checks
Automatically bypassing unhealthy instances to maintain availability.6 min
5
Encryption with HTTPS
Secure data in transit using SSL/TLS certificates.
- Understanding SSL/TLS
How encryption protects data moving between the user and the cloud.6 min - AWS Certificate Manager (ACM)
Managing your digital certificates easily within AWS.6 min - Requesting a Public Certificate
The steps to get a free, trusted SSL certificate from AWS.6 min - Attaching SSL to your ALB
Enabling HTTPS on your Load Balancer listener.6 min - Enforcing HTTPS Redirection
Automatically sending HTTP users to the secure HTTPS version.6 min
6
Monitoring and Auditing
Keep an eye on your network and audit for security gaps.
- Introduction to VPC Flow Logs
Capturing information about the IP traffic going to and from your VPC.6 min - Analyzing Traffic with CloudWatch
Visualizing network logs to spot suspicious activity.6 min - Auditing with AWS Config
Checking if your security groups follow the rules you've set.6 min - Tracking Changes with CloudTrail
Seeing who changed your network settings and when.6 min - Course Wrap-Up & Best Practices
Reviewing the secure architecture and planning next steps.6 min
The Secure Web Portal Project
You will design and document a secure AWS network architecture for a web application. This includes a public subnet for an ALB, a private subnet for web servers, and a configuration plan for SGs, NACLs, and HTTPS encryption.
What you'll get
-
📜
Certificate of completion
Add it to your LinkedIn profile -
💬
Personal AI tutor
Stuck on a lesson? Ask your built-in tutor anything, any time. -
♾️
Lifetime access
Come back anytime, no expiry -
📱
Phone or computer
Works anywhere, any device -
💸
14-day refund
No questions asked -
⚡
Short & focused
3h of practical content
Certificate of completion
Every course you complete on PickAClass issues a credential like this — original, with its own code, verifiable by URL, and detailed about what was actually demonstrated.
Reviews
No reviews yet — be the first to share your experience.
Learners also took
AWS Cloud Security Fundamentals: Secure Architectures
Cloud Computing Law and Digital Governance
AWS Security: Data Encryption Fundamentals
Data Privacy Principles for Information Architecture
Frequently asked
What do I need to take this course? +
Just a phone or computer with internet. No installs, no special hardware.
How do I pay? +
By card via Stripe. We don’t store card details — Stripe handles them securely.
Can I get a refund? +
Yes — full refund within 14 days, no questions asked.
How long will I have access? +
Forever. Once you purchase, the course is yours to revisit anytime.
Will I get a certificate? +
Yes. On completion you'll receive a certificate you can add to your LinkedIn profile.
Get 10 courses a month
Members get 10 courses of their choice every month for $0. No per-course charges — you pay only the subscription.
- ✓ 10 courses every month
- ✓ Cancel anytime
Renews monthly. Unused courses expire at the end of each billing month.