Lecture 251: Introduction to AWS Management & Governance Services
- 课程：[NEW] AWS Certified Advanced Networking Specialty 2026
- 视频时长：02:59
- 来源：Udemy Lecture 33789738
- Slide 数量：3
- 画面切换：00:39、02:02
扫描说明
逐条读取了 Transcript 面板中的 61 条英文 cue，并按播放器进度同步全长约 2:59 的视频。依据 Section Scope、AWS Network Manager/IPAM、General Governance Services 划分为 3 个小节。3 张截图来自真实课程 Slide，统一为 1364×770。
Transcript 来自 Udemy 页面自带的英文自动字幕，没有使用 ASR。下面保留页面原文，包括其中的语法或识别错误。
1. 本节目标：只学习能影响 Network Design、Operations 与 Exam Scenario 的 Governance 能力
时间范围：00:00–00:39
总结 / Summary
中文
Management & Governance 范围很大，完整内容更接近 Solutions Architect Professional 或 DevOps Exam；Advanced Networking 只需掌握能回答“如何集中管理、发现偏差、审计变更、监控故障、规划 IP”的服务边界。学习重点不是背 Console 菜单，而是把 Requirement 映射到 Control Plane：Topology/Connectivity、IPAM、Configuration Compliance、Audit Trail、Metrics/Logs、Multi-account Guardrail 与 Infrastructure as Code。
English
Management and governance is broad and is covered more deeply by Solutions Architect Professional and DevOps exams. For Advanced Networking, focus on services that answer how to manage centrally, detect drift, audit changes, monitor failures, and plan addresses. The goal is not memorizing console menus but mapping requirements to control planes: topology and connectivity, IPAM, configuration compliance, audit trails, metrics and logs, multi-account guardrails, and infrastructure as code.
Transcript
00:00 Hi, welcome to this section that is management and governance.
00:05 Now, in this section, we are going to cover
00:07 some AWS
00:08 services which are related to
00:10 AWS networking.
00:12 And to be honest,
00:13 the
00:14 AWS management and governance services are more related to other
00:17 AWS certification, for example,
00:19 for solutions architect professional or for the Devops certification exam.
00:25 But still in my opinion, it is worth touching upon few topics because we have seen
00:30 one or two odd questions around some of these services.
00:35 So let's try to focus on what is really important.
2. AWS Network Manager 汇聚 Connectivity/Topology，专门分析器与 IPAM 解决不同问题
时间范围：00:39–02:02
总结 / Summary
中文
AWS Network Manager 提供跨 Region/Account 的 Network Topology 与 Operational View，并承载/关联 Global Networks、Transit Gateway Network Manager 与 AWS Cloud WAN。Reachability Analyzer 解析单条 Source-to-Destination Path 的 Configuration Reachability；Network Access Analyzer 按 Policy 查询潜在 Network Access；VPC IPAM 负责 CIDR Pool、Allocation、Overlap、Utilization 与 Compliance。它们不是同一工具的不同按钮：Topology、Path Troubleshooting、Security Query 与 Address Lifecycle 各有独立 Data Model，考试应按问题选择。
English
AWS Network Manager provides cross-region and cross-account network topology and operational views and hosts or integrates Global Networks, Transit Gateway Network Manager, and AWS Cloud WAN. Reachability Analyzer evaluates configuration reachability for a specific source-to-destination path. Network Access Analyzer evaluates potential network access against policy. VPC IPAM manages CIDR pools, allocations, overlap, utilization, and compliance. These are not merely different buttons in one tool: topology, path troubleshooting, security queries, and address lifecycle use distinct data models, and exam scenarios should select accordingly.
Transcript
00:39 Okay. So in management and governance, we can divide this in two sections.
00:44 One is about the network management
00:47 and second is about general management and governance services which are
00:51 applicable to most of the other Aws components as well.
00:55 So if you specifically talk about network management,
00:59 so in
01:00 AWS, there is something called
01:01 AWS network manager.
01:03 Now,
01:03 if you have already gone through the lectures like cloud
01:06 one or reach ability analyzer or network access analyzer,
01:10 we have seen the network manager,
01:12 but this is a single pane of class where you can
01:15 do a lot of monitoring and troubleshooting and management of your networks in
01:21 AWS.
01:21 So we are not going to see the
01:24 AWS network manager in detail because ultimately,
01:27 it's just a portal through which you can do a lot of other things.
01:30 So as you can see here, it provides you to manage your va network that is cloud.
01:37 And then for network monitoring and troubleshooting,
01:39 you can use reach ability analyzer
01:41 and for security and governance, you can use network access analyzer.
01:46 Now,
01:46 in the earlier section, we have already seen these services.
01:50 Now, what we haven't seen here is IP management, which is
01:54 IPAM.
01:55 So in this section, we will cover in detail, what is
01:58 IPAM
01:59 and how to use
02:00 IPAM.
3. 通用 Governance 服务按“组织、配置、审计、观测、自动化”分层理解
时间范围：02:02–02:59
总结 / Summary
中文
通用服务包括：AWS Organizations/SCP 与 Control Tower 管理 Multi-account Structure/Guardrail；AWS Config 记录 Resource Configuration、Relationship 与 Compliance；CloudTrail 记录 API Activity/Who-did-what；CloudWatch 收集 Metrics、Logs、Alarms 与 Operational Events；CloudFormation 管理 Declarative Infrastructure Lifecycle。Systems Manager、Service Catalog、Cost & Usage Report、Personal Health Dashboard 等覆盖 Operations、Approved Product、Cost 与 AWS Event。遇题先辨别要的是 Preventive Guardrail、Detective Compliance、Forensic Audit、Runtime Telemetry 还是 Repeatable Provisioning，再选服务。
English
General services can be grouped by control purpose. AWS Organizations with SCPs and Control Tower manage multi-account structure and guardrails. AWS Config records resource configuration, relationships, and compliance. CloudTrail records API activity and who did what. CloudWatch collects metrics, logs, alarms, and operational events. CloudFormation manages declarative infrastructure lifecycle. Systems Manager, Service Catalog, Cost and Usage Reports, and Personal Health Dashboard cover operations, approved products, cost, and AWS events. First identify whether a question needs a preventive guardrail, detective compliance, forensic audit, runtime telemetry, or repeatable provisioning, then select the service.
Transcript
02:02 Now, as I said, this is very specific to
02:05 AWS network management,
02:06 but then there are other services which are generic,
02:09 but then you can also manage your network using those services.
02:13 So if I talk about in general
02:15 AWS management and governance services, there are
02:18 lot of services and it doesn't make sense to cover all these services in detail.
02:25 So I want to focus our discussion on these five services
02:29 because at times you might see some questions related to any of these services.
02:35 Now,
02:35 one more thing that we are not focusing on lots of hands-on
02:38 for these services because we want to be frugal with the time.
02:42 So it's important that you understand the concept
02:44 and it is expected that you are able to
02:47 relate to the service to the given questions
02:50 and we will cover this topic at least to that tape.
02:53 So I hope that is fine with you.
02:56 So with that, let's start this section.
整讲总结 / Overall Summary
中文
本节入口的核心是不要把所有 Management Service 混成“监控工具”。Network Manager 管 Topology/Connectivity View，Reachability Analyzer 管单路径，Network Access Analyzer 管 Policy-based Access Finding，IPAM 管 Address Lifecycle；Organizations/Control Tower、Config、CloudTrail、CloudWatch、CloudFormation 分别覆盖 Guardrail、Configuration、Audit、Telemetry 与 Provisioning。
English
The key is not to treat every management service as generic monitoring. Network Manager covers topology and connectivity views, Reachability Analyzer a specific path, Network Access Analyzer policy-based access findings, and IPAM address lifecycle. Organizations or Control Tower, Config, CloudTrail, CloudWatch, and CloudFormation cover guardrails, configuration, audit, telemetry, and provisioning respectively.
返回顶部 ↑