[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cheat-sheet---en":3,"domain-info---en":3,"topic-info----en":3,"lesson-aws-certified-cloudops-engineer-associate-networking-content-delivery-network-troubleshooting-troubleshooting-hybrid-connectivity-en":4,"next-aws-certified-cloudops-engineer-associate-networking-content-delivery-network-troubleshooting-troubleshooting-hybrid-connectivity-en":19,"prev-aws-certified-cloudops-engineer-associate-networking-content-delivery-network-troubleshooting-troubleshooting-hybrid-connectivity-en":30},null,{"locked":5,"reason":6,"meta":7,"item":3},true,"paywall",{"title":8,"description":9,"isFree":10,"estimatedMinutes":11,"difficulty":12,"learningObjectives":13},"Troubleshooting Hybrid and Private Connectivity","A VPN tunnel that will not come up, a Direct Connect BGP session stuck in Active, an endpoint that resolves to the wrong address. This lesson gives you a bottom-up diagnostic order for hybrid links and the private connectivity failures that look like them.",false,30,"advanced",[14,15,16,17,18],"Diagnose a hybrid link from the bottom layer up instead of starting at the routing layer","Separate a Site-to-Site VPN Phase 1 failure from a Phase 2 failure from a BGP failure using tunnel state and VPN logs","Work a Direct Connect problem through layer 1, layer 2, and layer 3 in order, using the CloudWatch metric for each","Identify the routing-layer failures that leave a healthy link carrying no traffic, including missing route propagation and prefix limits","Recognize the private connectivity failures caused by DNS, endpoint policies, and the absence of transitive routing",{"locked":5,"reason":6,"meta":20,"item":3},{"title":21,"description":22,"isFree":10,"estimatedMinutes":23,"difficulty":24,"learningObjectives":25},"CloudWatch Network Monitoring","Internet Monitor, Network Flow Monitor, and Network Synthetic Monitor each watch a different segment of your network, and picking the wrong one gives you a dashboard that cannot see the problem. This lesson separates them and pairs them with the per-resource metrics that catch silent failures.",26,"intermediate",[26,27,28,29],"Choose between Internet Monitor, Network Flow Monitor, and Network Synthetic Monitor based on which segment of the path is in question","Explain how each service collects data and what the network health indicator tells you","Interpret the NAT gateway, VPN, and Direct Connect metrics that reveal problems before users report them","Design alarms that catch silent network failures rather than restating traffic volume",{"locked":5,"reason":6,"meta":31,"item":3},{"title":32,"description":33,"isFree":10,"estimatedMinutes":34,"difficulty":24,"learningObjectives":35},"Troubleshooting CloudFront Issues","A CloudFront error can come from the viewer, the edge, or your origin, and the status code alone will not tell you which. This lesson teaches you to read the response headers and log fields that do, and to fix a collapsing cache hit ratio.",28,[36,37,38,39,40],"Determine whether a CloudFront response was generated by the edge or by the origin using response headers and log fields","Interpret x-edge-result-type, x-edge-response-result-type, and x-edge-detailed-result-type together","Diagnose a low cache hit ratio by finding the cache key dimension that is fragmenting the cache","Work through the common causes of CloudFront 403, 502, and 504 responses in the order that resolves them fastest","Choose between raising cache TTLs, adding Origin Shield, and invalidating, based on what the evidence shows"]