AWS Network Security: Securing Public Subnets with HTTPS — PickAClass
⏱ 3h 📚 32 lessons

AWS Network Security: Securing Public Subnets with HTTPS

Protect your cloud infrastructure by restricting public access to secure HTTPS traffic using load balancers and modern security groups on AWS.

  • 💬 AI instructor
    Ask about any lesson and get a clear answer instantly, anytime.
  • 🕐 Start anytime
    No schedules or deadlines — learn at your own pace, whenever suits you.
  • 🌐 In English
    Lessons, tasks and certificate — all fully in your language.

About this course

Publicly accessible cloud instances are prime targets for security threats if left unprotected. Securing your network entry points is the first and most critical line of defense for any cloud deployment. This course guides you through securing your public subnets by restricting access to HTTPS traffic. You will learn to isolate your backend resources, configure secure routing, and leverage load balancers to establish a robust and modern network security posture. What you'll learn: Understand foundational cloud networking concepts, including subnets, route tables, and internet gateways; Configure Security Groups and Network Access Control Lists using modern least-privilege principles; Deploy Application Load Balancers to safely route external HTTPS traffic to private backend instances; Implement SSL/TLS certificates to encrypt data in transit and ensure secure communication; Monitor network traffic and audit security configurations using modern logging tools. You will begin with core networking definitions and security fundamentals before moving step-by-step through configuring secure public-facing architectures. Through written explanations and practical configuration examples, you will build a solid foundation in cloud security. This course is designed for beginners in cloud administration, system operations, and security, with no prior advanced networking experience required. Start reading today to secure your cloud infrastructure against unauthorized web traffic.

Course contents

6 modules · 32 lessons · 3h

1 AWS Networking Foundations
Understand the basic building blocks of a cloud network.
6 lessons · 30 min
  1. Welcome to AWS Network Security
    Course overview and the importance of securing public entry points.
    5 min
  2. What is a VPC?
    Defining the Virtual Private Cloud as your isolated network bubble.
    5 min
  3. Subnets: Public vs. Private
    The difference between subnets that can talk to the internet and those that can't.
    5 min
  4. The Internet Gateway (IGW)
    How the IGW acts as the bridge between your VPC and the world.
    5 min
  5. Route Tables Explained
    Directing traffic flow within your network using route table rules.
    5 min
  6. Cloud Security Fundamentals
    The Shared Responsibility Model and why network security is your job.
    5 min
2 Firewalls: Security Groups and NACLs
Master the two layers of network defense in AWS.
6 lessons · 30 min
  1. Introduction to Security Groups
    Using stateful instance-level firewalls to control traffic.
    5 min
  2. Introduction to NACLs
    Using stateless subnet-level firewalls for an extra layer of defense.
    5 min
  3. The Principle of Least Privilege
    Granting only the minimum necessary access to your resources.
    5 min
  4. Configuring Inbound Rules
    How to properly open ports for specific traffic types.
    5 min
  5. Configuring Outbound Rules
    Restricting where your resources can send data.
    5 min
  6. SGs vs. NACLs: A Comparison
    Knowing when to use each tool for maximum security.
    5 min
3 Resource Isolation Strategies
Hide your sensitive data and logic from the public internet.
5 lessons · 30 min
  1. Why Isolate Your Backend?
    The risks of putting databases and app servers in public subnets.
    6 min
  2. Designing a Private Subnet
    Setting up a subnet with no direct route to the Internet Gateway.
    6 min
  3. Deploying Private Instances
    Launching EC2 instances that are unreachable from the outside.
    6 min
  4. The Role of NAT Gateways
    Allowing private instances to download updates without being exposed.
    6 min
  5. Restricting Backend Access
    Ensuring the backend only talks to the Load Balancer.
    6 min
4 Application Load Balancers (ALB)
Use an ALB to safely manage incoming web traffic.
5 lessons · 30 min
  1. What is an ALB?
    The ALB as the single, secure entry point for your application.
    6 min
  2. Setting Up Target Groups
    Grouping your private instances so the ALB knows where to send traffic.
    6 min
  3. Configuring ALB Listeners
    Defining which ports the ALB should watch for incoming requests.
    6 min
  4. Routing Traffic to Private Subnets
    The flow of a request from the public ALB to a private instance.
    6 min
  5. ALB Health Checks
    Automatically bypassing unhealthy instances to maintain availability.
    6 min
5 Encryption with HTTPS
Secure data in transit using SSL/TLS certificates.
5 lessons · 30 min
  1. Understanding SSL/TLS
    How encryption protects data moving between the user and the cloud.
    6 min
  2. AWS Certificate Manager (ACM)
    Managing your digital certificates easily within AWS.
    6 min
  3. Requesting a Public Certificate
    The steps to get a free, trusted SSL certificate from AWS.
    6 min
  4. Attaching SSL to your ALB
    Enabling HTTPS on your Load Balancer listener.
    6 min
  5. Enforcing HTTPS Redirection
    Automatically sending HTTP users to the secure HTTPS version.
    6 min
6 Monitoring and Auditing
Keep an eye on your network and audit for security gaps.
5 lessons · 30 min
  1. Introduction to VPC Flow Logs
    Capturing information about the IP traffic going to and from your VPC.
    6 min
  2. Analyzing Traffic with CloudWatch
    Visualizing network logs to spot suspicious activity.
    6 min
  3. Auditing with AWS Config
    Checking if your security groups follow the rules you've set.
    6 min
  4. Tracking Changes with CloudTrail
    Seeing who changed your network settings and when.
    6 min
  5. Course Wrap-Up & Best Practices
    Reviewing the secure architecture and planning next steps.
    6 min
Final project

The Secure Web Portal Project

You will design and document a secure AWS network architecture for a web application. This includes a public subnet for an ALB, a private subnet for web servers, and a configuration plan for SGs, NACLs, and HTTPS encryption.

What you'll get

  • 📜 Certificate of completion
    Add it to your LinkedIn profile
  • 💬 Personal AI tutor
    Stuck on a lesson? Ask your built-in tutor anything, any time.
  • ♾️ Lifetime access
    Come back anytime, no expiry
  • 📱 Phone or computer
    Works anywhere, any device
  • 💸 14-day refund
    No questions asked
  • ⚡ Short & focused
    3h of practical content

Certificate of completion

Every course you complete on PickAClass issues a credential like this — original, with its own code, verifiable by URL, and detailed about what was actually demonstrated.

P
PickAClass
Skills profile · verifiable
Document
Certificate of Mastery
This certifies that
Name Surname
has successfully demonstrated mastery of
AWS Network Security: Securing Public Subnets with HTTPS
Skills demonstrated
✓
Behavioral pattern analysis
Foundational
1.2 hrs
✓
Decision-architecture frameworks
Proficient
1.4 hrs
✓
A/B test design
Proficient
1.7 hrs
✓
Behavioral copywriting
Advanced
1.9 hrs
P
PickAClass — Name Surname
AWS Network Security: Securing Public Subnets with HTTPS
Page 2 of 2
Performance detail
Coursework summary
Lessons completed 14 / 14
Practice questions 26 / 28
Assignments submitted 4 (avg 4.5 / 5)
Capstone project Reviewed — 4.6 / 5
Total practice 6.2 hrs
Performance benchmark
Cohort rank Top 12% of 1,625
Time to completion 11 days (median: 22)
Mastery score 91 / 100
Practice-question score 94%
Skill verification Verified Skill Path
Verify this credential
pickaclass.com/certificates/PCC-2026-X4F7-AP19
Issued under the academic standards of PickAClass. Skill levels reflect assessed performance against the course's competency rubric. This is an original credential of this platform.

Reviews

No reviews yet — be the first to share your experience.

Write a review

☆☆☆☆☆
You'll be asked to sign in after sending — your draft is saved.

Learners also took

Frequently asked

What do I need to take this course? +

Just a phone or computer with internet. No installs, no special hardware.

How do I pay? +

By card via Stripe. We don’t store card details — Stripe handles them securely.

Can I get a refund? +

Yes — full refund within 14 days, no questions asked.

How long will I have access? +

Forever. Once you purchase, the course is yours to revisit anytime.

Will I get a certificate? +

Yes. On completion you'll receive a certificate you can add to your LinkedIn profile.

Built for learners in
Tech Design Finance Marketing Healthcare Education Hospitality Manufacturing