Develop expertise in secure network architecture spanning on-premises and cloud environments. Learn to implement resilient network segmentation, defense-in-depth controls, and Zero Trust principles. Build secure network perimeter designs using AWS security services, and implement protected hybrid connectivity through AWS Site-to-Site VPN and AWS Direct Connect with MACsec encryption. Explore centralized traffic inspection, transit architectures, and multi-cloud connectivity for complex environments. Design network infrastructures that maintain security during disruptions while enabling business operations across distributed locations. This course is part of the AWS Security Engineer Advanced Learning Plan. If you are preparing for this role please refer to the other courses in the learning plan as needed.