Western Governors University

E030: BSCNE-AWS Capstone Project

A study guide to the capstone of WGU's BS Cloud and Network Engineering AWS program, completed in an Amazon Web Services environment.

Updated October 2026 · 5 min read

E030 is the four-unit capstone of the AWS version of WGU's Bachelor of Science, Cloud and Network Engineering. It follows the same structure as the standard capstone, but all tasks are completed in an AWS environment.

The guidebook says students choose from a fixed set of workplace tasks and submit them in a working, deployed environment. Tasks use either the AWS command line interface or web-based tools and standard AWS platform components, and an evaluator checks the results by inspecting configurations or testing services.

Students who are fluent in general networking sometimes stumble on AWS specifics, such as how route tables, security groups and gateways interact. The capstone rewards those who understand how the pieces connect.

Course at a Glance

ItemDetails
UniversityWestern Governors University (WGU)
CourseE030, BSCNE-AWS Capstone Project
Competency units4
LevelUndergraduate capstone
ProgramBS Cloud and Network Engineering, AWS
PlatformAWS CLI or web-based tools and standard AWS components

What E030 Covers

Competency (WGU wording, summarized)What it asks of you
Deploy a hybrid network environment combining an on-premises network and a cloud network in AWSBuild and connect both sides using AWS
Design a hybrid network environment in AWSPlan address ranges, connections and security
Troubleshoot connectivity within a hybrid network in AWSDiagnose and repair faults

Key Concepts Explained

The Pieces of an AWS Network

A virtual private cloud (VPC) contains subnets. Route tables decide where traffic goes, gateways connect the VPC to the internet or to an on-premises network, and security groups and network access control lists filter traffic. Understanding how these interact is central to the capstone.

Stateful and Stateless Filters

Security groups are stateful: return traffic for an allowed connection is permitted automatically. Network access control lists are stateless, so rules must allow traffic in both directions. This difference explains many connectivity faults.

Illustration: A server in a private subnet cannot be reached from the office over a VPN. The tunnel is up and the security group allows the office range. The subnet's route table, however, has no route back to the office range, so replies are lost. Adding that route, or enabling route propagation if it is used, restores connectivity.

Documenting for an Evaluator

Name resources clearly, tag them, and keep a note of configuration choices and the tests that prove each requirement is met.

Typical Assignments and How to Approach Them

Task elementWhat it testsHow to approach it
Deploying in AWSWorking configurationBuild step by step and test after each stage
DesignPlanning in an AWS contextShow ranges, subnets, routes and filters in a diagram
TroubleshootingSystematic methodCheck routes, filters and gateways in order

An AWS Connectivity Checklist

When traffic does not flow, work through the same list each time. This habit is faster than guessing, and it makes your troubleshooting notes easy to follow.

CheckQuestion
LinkIs the connection between the sites up?
RoutesDo both sides have routes to each other's ranges?
FiltersDo security groups and access lists allow the traffic both ways?
ServiceIs the target actually listening and healthy?

Choosing and Scoping Your Task

Read each available task against the rubric and choose the one where you can demonstrate deployment, design and troubleshooting clearly in AWS. A smaller build that works and is well documented is safer than a broad one that is only partly finished.

Write a short scope before you start: networks and ranges, how the on-premises side connects, which filters apply and how you will test. Because you may use the command line or the console, pick the approach you can repeat reliably and keep notes of the commands or steps. At the end, confirm that every resource the evaluator needs is running and reachable.

Weak and Strong Troubleshooting Notes

The evaluator looks for order and evidence in how you diagnose faults.

WeakStronger
The server was not reachable so I rebuilt it.The tunnel was established and the security group allowed the office range. The subnet route table had no route back to the office, so replies were dropped. I added the route and confirmed with a test from the office.

Rebuilding rarely solves a routing fault. Working through link, routes, filters and service finds the cause faster.

Where Students Get Stuck

Study Tips for E030

How We Help with E030

Send the task options and rubric. A tutor can help you plan the design, explain AWS networking concepts and review your documentation. We do not build, access or log in to your AWS environment: the deployed work must be your own, completed under WGU's academic integrity policy.

GradeEssays is independent of Western Governors University and of Amazon Web Services. Orders are written from scratch, include free revisions within the scope of your original request, and are refunded in full if late.

Get Your AWS Capstone Plan Clear

Share the task, your design notes and feedback. We help you organize documentation and test evidence.

Start My E030 Help

Free revisions · Full refund if late · Written from scratch for your order

Frequently Asked Questions

How many competency units is E030?

The guidebook lists 4.

What platform is used?

AWS, using the AWS CLI or web-based tools and standard platform components.

How is it evaluated?

An evaluator inspects configurations or tests services in the working environment.

Is E030 different from E029?

The competencies are the same in structure, but all work is in AWS.

Is there a prerequisite?

None is stated in the course description.

Can you review my design?

Yes. We check structure and reasoning, but we do not access or build your environment.