This course was developed by members of AWS Technical Field Communities (TFC), an AWS community of technical experts. The content is intended to complement our standard training curriculum and augment your AWS learning journey. We are aware some courses have accessibility limitations and are working to address. If you require accommodation, please contact AWS Training and Certification Customer Support.
Learners can gain practical skills in using AWS DevOps Agent to accelerate troubleshooting of AWS Network Firewall connectivity issues. The course covers how to connect CloudWatch monitoring to DevOps Agent and walks through three real-world failure scenarios -- a domain deny list blocking a legitimate endpoint, a stateless rule priority misconfiguration, and an asymmetric cross-AZ routing drop. Participants learn how the agent automates root cause analysis by correlating logs, firewall configurations, route tables, and CloudTrail API activity, and they can reproduce each scenario using a provided CDK stack in their own account.
