Skip to main content
Ace Skills Consulting
Amazon Web Services (AWS) logoAdvanced

ANS-C01: AWS Advanced Networking – Specialty

Design and run complex AWS networks — hybrid connectivity, routing at scale and network security — prepared for the ANS-C01 exam.

  • 24 hours of advanced networking training
  • Hybrid connectivity with Direct Connect and VPN
  • Transit Gateway routing and segmentation labs
  • Covers all four ANS-C01 domains
  • Troubleshooting drills with AWS network tools
Aligned to Amazon Web Services (AWS) exam ANS-C01
Duration
3 Days | 24 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Advanced
Exam
ANS-C01
Language
English

Why learn ANS-C01 with Ace Skills

  • Routing at scale

    Design Transit Gateway and hybrid routing that stays manageable as the network grows.

  • Hybrid made practical

    Connect on-premises networks with VPN and Direct Connect, including failover between them.

  • Inspection and control

    Build centralised inspection and egress patterns that security teams can rely on.

  • Specialty-level preparation

    Practise the networking scenarios that make ANS-C01 one of the hardest AWS exams.

Course overview

Networking is the part of AWS that most often decides whether an architecture is secure, fast and affordable. As organisations grow from a handful of VPCs to hundreds, connected to data centres and branch offices, they need engineers who understand routing, DNS, hybrid links and network security in depth. This three-day course is designed for network professionals taking that step on AWS.

Day one covers network design: VPC addressing at scale, IPv6, connectivity options between VPCs, edge networking with CloudFront and Global Accelerator, and hybrid DNS. Day two focuses on implementation: Direct Connect virtual interfaces and gateways, Site-to-Site VPN with BGP, Transit Gateway route tables for segmentation, and load balancing choices. Day three covers management, operations and security: monitoring and troubleshooting with Flow Logs, Reachability Analyzer and Network Access Analyzer, automation with infrastructure as code, and protection with Network Firewall, WAF and centralised inspection.

Labs simulate an enterprise network: several VPCs, a simulated on-premises site connected by VPN with dynamic routing, segmented routing domains and centralised egress. You will break and fix routes, investigate asymmetric traffic and design for failover between links.

Exam questions at this level combine networking theory with AWS-specific behaviour, so the final session focuses on those patterns. This course is aligned to the ANS-C01 exam and prepares you for it; confirm the current exam guide on the AWS Certification site before booking.

Key features

  • Enterprise network built and troubleshot in class
  • BGP-based VPN and Direct Connect design
  • Transit Gateway segmentation and centralised egress
  • Hybrid DNS with Route 53 Resolver
  • Network security with Network Firewall and WAF
  • Scenario-based practice questions
  • Course completion certificate from Ace Skills Consulting

Who should attend

  • Network engineers moving into cloud networking
  • Cloud and solutions architects responsible for connectivity
  • Infrastructure engineers managing hybrid environments
  • Network security engineers working with AWS

Prerequisites

  • Strong networking fundamentals including routing, BGP and DNS
  • Associate-level AWS knowledge or equivalent hands-on experience
  • Familiarity with VPC concepts

Curriculum

3 Days · 24 Hours · 9 Modules · 6 Labs

  1. VPC design at scale

    • IP address planning and IPAM
    • IPv6 and dual-stack VPCs
    • VPC peering versus Transit Gateway versus PrivateLink
    • Shared VPCs
    • Lab: Plan and allocate VPC CIDRs with Amazon VPC IPAM · 35 min

    Edge and global networking

    • CloudFront origins and behaviours
    • Global Accelerator
    • Route 53 routing policies
    • Elastic Load Balancing selection

    Hybrid DNS

    • Route 53 private hosted zones
    • Resolver inbound and outbound endpoints
    • Forwarding rules shared across accounts
    • DNSSEC basics
    • Lab: Configure hybrid DNS resolution with Route 53 Resolver · 45 min

  2. Site-to-Site VPN

    • VPN tunnels and BGP
    • Accelerated VPN
    • Route propagation and preference
    • VPN as Direct Connect backup
    • Lab: Connect a simulated data centre with BGP-based VPN · 60 min

    AWS Direct Connect

    • Connections, LAGs and virtual interfaces
    • Direct Connect gateway
    • Resiliency models
    • MACsec and encryption options

    Transit Gateway

    • Attachments and route tables
    • Segmentation with routing domains
    • Inter-Region peering
    • Centralised egress and inspection VPCs
    • Lab: Segment production and development with Transit Gateway route tables · 55 min

  3. Monitoring and troubleshooting

    • VPC Flow Logs analysis
    • Reachability Analyzer and Network Access Analyzer
    • Traffic Mirroring
    • Diagnosing asymmetric routing
    • Lab: Find and fix three broken network paths · 45 min

    Network security and governance

    • AWS Network Firewall policies
    • Security groups and NACL design
    • AWS WAF and Shield
    • Firewall Manager across accounts
    • Lab: Route egress traffic through Network Firewall · 40 min

    Automation and exam readiness

    • Network infrastructure as code
    • Cost of data transfer paths
    • Timed practice set with review
Download full syllabus (PDF)

Skills you will gain

  • Amazon VPC
  • IPv6
  • Transit Gateway
  • AWS Direct Connect
  • Site-to-Site VPN
  • BGP
  • Route 53 Resolver
  • CloudFront
  • Global Accelerator
  • AWS Network Firewall
  • Network troubleshooting

Tools & technologies

  • AWS Management Console
  • AWS CLI
  • Amazon VPC IPAM
  • Reachability Analyzer
  • VPC Flow Logs
  • AWS CloudFormation

Certification exam

Exam details
Exam nameAWS Certified Advanced Networking – Specialty
Exam codeANS-C01
Number of questions65
Duration170 minutes
Passing score750 / 1000 (scaled)
Voucher includedNo — book directly with the vendor
Question formatMultiple choice, Multiple response
DeliveryOnline proctored or Test centre
Validity & renewal3 years

Skill areas measured

  1. Network Design
  2. Network Implementation
  3. Network Management and Operation
  4. Network Security, Compliance, and Governance

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking. Official exam page (opens in a new tab)

Schedule & Pricing

Live Online

Individual

Price on request

  • 24 hours of live, trainer-led sessions
  • 6 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 2 · 60 min

    Connect a simulated data centre with BGP-based VPN

  • Day 2 · 55 min

    Segment production and development with Transit Gateway route tables

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The Amazon Web Services (AWS) certification itself is awarded by Amazon Web Services (AWS) when you pass exam ANS-C01.

Frequently asked questions

Do I need CCNA-level networking knowledge?

It helps a great deal. You should be comfortable with routing, BGP concepts and DNS before joining.

Will we use a real Direct Connect link?

Direct Connect is covered through design exercises and console walkthroughs; hybrid labs use VPN to a simulated data centre, which follows the same routing principles.

Is this harder than Solutions Architect – Associate?

Yes. It assumes architect-level AWS knowledge and goes much deeper into routing, DNS and hybrid connectivity.

Does the course cover IPv6?

Yes. Dual-stack VPC design and IPv6 routing are included on Day 1.

Can you tailor the course for our network team?

Yes. Corporate batches can model your hybrid topology in the labs.

Related courses

Explore more

All AWS courses Amazon Web Services (AWS) certifications

Amazon Web Services, AWS and the related marks are trademarks of Amazon.com, Inc. or its affiliates.

Train your team on ANS-C01

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.