Week 3: Networking, Infrastructure Security, and Deployment Environment Preparation

1. Objectives

  • Build a deeper understanding of AWS networking to support secure backend deployment.
  • Clarify access control layers at both network and resource levels.
  • Prepare the infrastructure foundation for later system design stages.

2. Weekly Tasks Breakdown

DayMain TaskDetailsStatus
MonAWS Networking Fundamentals- Studied VPC, subnets, route tables, Internet Gateway, and NAT Gateway.
- Built the foundation for backend network topology design.
Completed
TueIsolation Strategy- Analyzed how backend components can be isolated across private and public subnets.
- Considered different access needs for different service types.
Completed
WedNetwork Security Practice- Practiced network security configuration.
- Clarified the difference between Security Groups and NACLs in traffic control.
Completed
ThuInfrastructure Discussion- Discussed infrastructure requirements with the team.
- Focused on reducing attack surface during deployment.
Completed
FriReview and Consolidation- Consolidated networking and security knowledge from the week.
- Prepared for the IAM and authorization stage.
Completed

3. Outcomes

  • Built a stronger foundation for designing backend network topology on AWS.
  • Better understood how routing, gateways, and filtering layers work together to protect resources.
  • Became more prepared to move from infrastructure knowledge into system security and authorization design.

4. Issues & Solutions

  • Issue: It was easy to confuse the scope of Security Groups and NACLs at first.
  • Solution: Checked concrete traffic scenarios so the concepts were tied to real behavior rather than theory alone.

5. Next Steps

  • Shift focus to IAM, policies, and authorization mechanisms.
  • Prepare the foundation for later decisions around auth, roles, and backend security posture.