[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-656181-105":3,"detail-sidebar-cat-0-en-105":81,"doc-detail-656181-en":130},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","amazon-web-services-aws-reference-architecture-aws-reference-architecture-white-paper","Amazon Web Services (AWS) Reference Architecture - AWS Reference Architecture White Paper","","Amazon Web Services (AWS) Reference Architecture describes core AWS building blocks and how to structure a secure, scalable cloud environment. It introduces the shared responsibility model, then walks through networking fundamentals such as VPC, subnets, route tables, internet and NAT gateways, and VPN and transit connectivity. The paper focuses on integrating Fortinet FortiGate on AWS, including bootstrapping, security inspection flows, and high availability patterns, before concluding with practical AWS security design guidance.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/technology/","Technology",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/amazon-web-services-aws-reference-architecture-aws-reference-architecture-white-paper/656181/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/amazon-web-services-aws-reference-architecture-aws-reference-architecture-white-paper/656181.png","ImageObject",300,407,{"name":42,"@type":43},"eBook King","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-11-02","2026-10-25",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",9,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What is the shared responsibility model in AWS?","Question",{"text":63,"@type":64},"Cloud providers manage security of the cloud itself, while customers are responsible for security in the cloud, including configuring and deploying security baselines for their environments.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"Which AWS networking components does the guide cover for reference architecture?",{"text":68,"@type":64},"It covers Regions and Availability Zones, VPC, subnets, Network ACLs, security groups, route tables, internet and NAT gateways, elastic network interfaces, and VPN-related constructs like virtual and customer gateways and transit gateway.",{"name":70,"@type":61,"acceptedAnswer":71},"How does the document approach deploying FortiGate on AWS?",{"text":72,"@type":64},"It explains FortiGate on AWS deployment steps such as bootstrapping, using fabric connector concepts, dynamic address objects, example firewall policy creation, and patterns for single deployment and inspection flows.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},656181,1793030726,{"code":4,"msg":82,"data":83},"success",[84,88,92,96,101,105,110,115,119,122,126],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":85,"show_sort_weight":86,"slug":87},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":89,"show_sort_weight":90,"slug":91},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":93,"show_sort_weight":94,"slug":95},"Exam",70,"exam",{"id":97,"doc_module":4,"doc_module_name":25,"category_name":98,"show_sort_weight":99,"slug":100},5,"Comic",60,"comic",{"id":102,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":103,"slug":104},6,50,"technology",{"id":106,"doc_module":4,"doc_module_name":25,"category_name":107,"show_sort_weight":108,"slug":109},7,"Healthcare",40,"healthcare",{"id":111,"doc_module":4,"doc_module_name":25,"category_name":112,"show_sort_weight":113,"slug":114},8,"Research & Report",30,"research-report",{"id":55,"doc_module":4,"doc_module_name":25,"category_name":116,"show_sort_weight":117,"slug":118},"Religion & Spirituality",20,"religion-spirituality",{"id":117,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":117,"slug":121},"World Cup","world-cup",{"id":123,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":123,"slug":125},10,"Lifestyle","lifestyle",{"id":127,"doc_module":4,"doc_module_name":25,"category_name":128,"show_sort_weight":97,"slug":129},19,"General","general",{"code":4,"msg":82,"data":131},{"doc_id":79,"user_id":132,"nickname":42,"user_avatar":133,"doc_module":4,"category_id":102,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":139,"language":140,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":12,"update_tm":144,"read_time":145},962088006270,"https://ap-avatar.wpscdn.com/davatar_085a072bc5b1113ac321206ff7593b45","WHITE PAPER  \nAmazon Web Services (AWS) Reference Architecture  \nTABLE OF CONTENTS  \nExecutive Summary  ................................................ 4  \nThe shared responsibility model  .................................... 4  \nAWS Networking and Service Primer  .................................. 5  \nRegions and Availability Zones (AZ)  .................................. 5  \nVirtual Private Cloud (V PC)  ......................................... 6  \nSub nets  ......................................................... 6  \nNetwork AC L  .................................................... 7  \nSecurity groups  .................................................. 7  \nRoute tables  ..................................................... 7  \nInternet gateway  ................................................. 8  \nNAT gateway  .................................................... 8  \nElastic network interfaces  .......................................... 8  \nAW S V PN  ....................................................... 9  \nVirtual private gateway  .......................................... 9  \nCustomer gateway  ............................................. 10  \nTransit gateway  ................................................ 10  \nFortiGate Next-Generation Firewall VM  ............................... 13  \nFort i Manager VM  ................................................ 13  \nFort iGuard Security Services  ...................................... 14  \nFort in et Licensing  ............................................... 14  \nInstance type support  ............................................ 15  \n2  \nFort iGate launch on AW S  ......................................... 17  \nBootstrapping FortiGate at initial boot-up  ............................ 17  \nFort inet Fabric Connector  ......................................... 17  \nDynamic address objects  ........................................ 17  \nExample: Create a firewall policy using dynamic address objects  ....... 18  \nDeploying a single FortiGate-V M on AWS  ............................ 19  \nInbound traffic inspection (north-south)  ........................... 19  \nOutbound traffic inspection  ...................................... 20  \nFortiGate High Availability and Resiliency in AWS  ....................... 21  \nResilient outbound connection to on-premises network  ................ 22  \nActive-passive deployment with Unicast HA  ......................... 22  \nResiliency for outbound traffic: active-active failover  .................. 23  \nDesign Patterns  ................................................... 26  \nResilient FortiGate deployment integrated with AWS Transit Gateway  .... 27  \nElastic Load Balancing with FortiGate auto scaling  .................... 28  \nHighly Scalable Security Inspection for Customer VPCs with GWLB  ........ 29  \nConclusion  ....................................................... 31  \n3  \nExecutive Summary  \nThe public cloud, often referred to as “the cloud,” continues to be a popular model of cloud computing. Cloud service providers leverage the internet and make resources such as infrastructure, storage, and servers available for businesses.  \nThird-party providers own and operate the shared physical hardware and offer it to companies based on their needs  .  \nCompanies around the globe adopt the cloud to take advantage of core characteristics:  \nCost-effectiveness. Cloud infrastructure means customers do not need to spend money on purchasing and maintaining equipment  . This drastically reduces capital expenditure (CapEx) costs, saving companies the resources and time to invest in hardware, facilities, and utilities, or to build out a large data center to grow their business  .  \nScalability. Cloud-based solutions are ideal for businesses with growing and fluctuating bandwidth demands  . If business demands increase, customers can easily increase their cloud capacity without investing in more physical infrastructure  . This level of agility provides","cbCaimlFrDWUcxFM","https://ap.wps.com/l/cbCaimlFrDWUcxFM","pdf",5136994,31,"English","# Executive Summary\n## The shared responsibility model\n# AWS Networking and Service Primer\n## Regions and Availability Zones (AZ)\n## Virtual Private Cloud (VPC)\n## Subnets\n## Network ACL\n## Security groups\n## Route tables\n## Internet gateway\n## NAT gateway\n## Elastic network interfaces\n## AWS VPN\n## Design Patterns\n## Conclusion","[{\"question\":\"What is the shared responsibility model in AWS?\",\"answer\":\"Cloud providers manage security of the cloud itself, while customers are responsible for security in the cloud, including configuring and deploying security baselines for their environments.\"},{\"question\":\"Which AWS networking components does the guide cover for reference architecture?\",\"answer\":\"It covers Regions and Availability Zones, VPC, subnets, Network ACLs, security groups, route tables, internet and NAT gateways, elastic network interfaces, and VPN-related constructs like virtual and customer gateways and transit gateway.\"},{\"question\":\"How does the document approach deploying FortiGate on AWS?\",\"answer\":\"It explains FortiGate on AWS deployment steps such as bootstrapping, using fabric connector concepts, dynamic address objects, example firewall policy creation, and patterns for single deployment and inspection flows.\"}]","Amazon Web Services (AWS) Reference Architecture - AWS Reference Architecture White Paper | PDF",1792966875,78]