WESTERN GOVERNORS UNIVERSITY | BSCNE-AWS
TASK 2: HYBRID-CLOUD IMPLEMENTATION AND
FUNCTIONALITY REPORT
Original reference implementation and evidence-ready report - 2026/2027
DOCUMENT CONTROL DETAILS
Course E030 - BSCNE-AWS Capstone Project
Project Secure Hybrid-Cloud Network for Cedarline Distribution Cooperative
Case status Fictional business setting; approved Task 1 scope not verified
Student [Enter student name and WGU ID]
Cloud region [Enter approved AWS Region]
Deployment method AWS CloudFormation + GNS3/VyOS
Deployment evidence Not supplied; implementation steps and test records included
Assessment rubric Current E030 detailed task rubric not publicly authenticated
Date / version November 2026 / original model v1.0
Academic integrity / verification notice. The associated infrastructure template and scripts are original, educational implementation
assets. No AWS services or GNS3 lab have been deployed by the author of this report, and no test outcome has been fabricated. Fields
marked [ACTUAL RESULT PENDING] must be completed with genuine lab evidence. This package cannot be represented as a passed or
evaluator-approved WGU submission.
Important course distinction. WGU publishes E030 as a practical AWS capstone involving a working environment and a chosen set of
tasks. Public student reports mention an approval form and functionality report, but a distinct official “Task 2” rubric was not accessible. The
phase numbering here follows the Task 1 project plan, not an assertion of WGU task count. [1,2]
Companion files: e030-hybrid-network.yaml; collect-e030-evidence.sh; validate_local.py; README.md. The template defines 13
CloudFormation resources and 11 outputs; it passed local parsing and basic structural checks only.
WGU E030 | Task 2 | Original model implementation | Live tests pending 1
, 1. Executive Summary
Cedarline Distribution Cooperative, a fictional regional logistics organization, proposes a secure hybrid network that joins its
simulated GNS3 headquarters with private Amazon Web Services workloads. Task 1 defined the business need, scope,
proposed VLANs, Amazon VPC address space, site-to-site VPN, security policy, and acceptance tests. This Task 2 package
converts that proposal into a deployment runbook, an original AWS CloudFormation template, operational configuration
guidance, a repeatable verification framework, and an evidence-ready functionality report.
The planned headquarters contains VLAN 10 (10.40.10.0/24) for test clients and VLAN 20 (10.40.20.0/24) for local services.
The AWS side contains a VPC (10.70.0.0/16), private subnets (10.70.10.0/24 and 10.70.20.0/24), one private EC2 instance
serving a synthetic HTTP page, and a single AWS Site-to-Site VPN connection with two tunnels. A virtual private gateway
uses BGP to learn headquarters routes from a VyOS customer gateway. Incoming workload access is restricted to TCP/8080
from the headquarters client VLAN.
The expected outcome is positive on-premises-to-AWS service connectivity; verified route and tunnel state; negative tests
proving disallowed inbound access; and a controlled failure-and-recovery diagnostic record. Because no deployment
environment or test artifacts were supplied, all outcomes remain pending. [1,3,4]
2. Published Course Expectations and Claim Boundaries
SOURCE / CLAIM STATUS IMPLICATION
WGU E030 AWS capstone uses working Official public Produce inspectable configuration and observed function, not only
AWS environment description written prose.
Approved design and functionality report Student community Treat as likely artifacts; verify with live instructor instructions.
submitted report
Three distinct graded Task / 3 rubrics Not authenticated Use Task 2 as an internal phase label; do not claim this is the
official rubric.
This specific GNS3-to-AWS topology is Not established Instructor approval and account capability are gating conditions.
mandatory
3. Project Objectives and Traceability
OBJECTIVE ACCEPTANCE STANDARD EVIDENCE
O1 - Local segmentation Two configured VLANs and authorized local VyOS/switch configuration plus source/destination
communication test
O2 - AWS creation VPC, 2 private subnets, routes, VPN, SG, instance exist CloudFormation stack status and resource IDs
O3 - Encrypted Valid IPsec tunnel and application access over private Tunnel telemetry and curl response
connectivity address
O4 - Bidirectional routing Accurate BGP prefixes and effective return route VyOS BGP and VPC route-table records
O5 - Security 8080 allowed for VLAN10; 22 not allowed SG rule export and positive/negative tests
enforcement
O6 - Troubleshooting One controlled fault diagnosed, corrected and retested Before/after records, root cause and resolution
WGU E030 | Task 2 | Original model implementation | Live tests pending 2
TASK 2: HYBRID-CLOUD IMPLEMENTATION AND
FUNCTIONALITY REPORT
Original reference implementation and evidence-ready report - 2026/2027
DOCUMENT CONTROL DETAILS
Course E030 - BSCNE-AWS Capstone Project
Project Secure Hybrid-Cloud Network for Cedarline Distribution Cooperative
Case status Fictional business setting; approved Task 1 scope not verified
Student [Enter student name and WGU ID]
Cloud region [Enter approved AWS Region]
Deployment method AWS CloudFormation + GNS3/VyOS
Deployment evidence Not supplied; implementation steps and test records included
Assessment rubric Current E030 detailed task rubric not publicly authenticated
Date / version November 2026 / original model v1.0
Academic integrity / verification notice. The associated infrastructure template and scripts are original, educational implementation
assets. No AWS services or GNS3 lab have been deployed by the author of this report, and no test outcome has been fabricated. Fields
marked [ACTUAL RESULT PENDING] must be completed with genuine lab evidence. This package cannot be represented as a passed or
evaluator-approved WGU submission.
Important course distinction. WGU publishes E030 as a practical AWS capstone involving a working environment and a chosen set of
tasks. Public student reports mention an approval form and functionality report, but a distinct official “Task 2” rubric was not accessible. The
phase numbering here follows the Task 1 project plan, not an assertion of WGU task count. [1,2]
Companion files: e030-hybrid-network.yaml; collect-e030-evidence.sh; validate_local.py; README.md. The template defines 13
CloudFormation resources and 11 outputs; it passed local parsing and basic structural checks only.
WGU E030 | Task 2 | Original model implementation | Live tests pending 1
, 1. Executive Summary
Cedarline Distribution Cooperative, a fictional regional logistics organization, proposes a secure hybrid network that joins its
simulated GNS3 headquarters with private Amazon Web Services workloads. Task 1 defined the business need, scope,
proposed VLANs, Amazon VPC address space, site-to-site VPN, security policy, and acceptance tests. This Task 2 package
converts that proposal into a deployment runbook, an original AWS CloudFormation template, operational configuration
guidance, a repeatable verification framework, and an evidence-ready functionality report.
The planned headquarters contains VLAN 10 (10.40.10.0/24) for test clients and VLAN 20 (10.40.20.0/24) for local services.
The AWS side contains a VPC (10.70.0.0/16), private subnets (10.70.10.0/24 and 10.70.20.0/24), one private EC2 instance
serving a synthetic HTTP page, and a single AWS Site-to-Site VPN connection with two tunnels. A virtual private gateway
uses BGP to learn headquarters routes from a VyOS customer gateway. Incoming workload access is restricted to TCP/8080
from the headquarters client VLAN.
The expected outcome is positive on-premises-to-AWS service connectivity; verified route and tunnel state; negative tests
proving disallowed inbound access; and a controlled failure-and-recovery diagnostic record. Because no deployment
environment or test artifacts were supplied, all outcomes remain pending. [1,3,4]
2. Published Course Expectations and Claim Boundaries
SOURCE / CLAIM STATUS IMPLICATION
WGU E030 AWS capstone uses working Official public Produce inspectable configuration and observed function, not only
AWS environment description written prose.
Approved design and functionality report Student community Treat as likely artifacts; verify with live instructor instructions.
submitted report
Three distinct graded Task / 3 rubrics Not authenticated Use Task 2 as an internal phase label; do not claim this is the
official rubric.
This specific GNS3-to-AWS topology is Not established Instructor approval and account capability are gating conditions.
mandatory
3. Project Objectives and Traceability
OBJECTIVE ACCEPTANCE STANDARD EVIDENCE
O1 - Local segmentation Two configured VLANs and authorized local VyOS/switch configuration plus source/destination
communication test
O2 - AWS creation VPC, 2 private subnets, routes, VPN, SG, instance exist CloudFormation stack status and resource IDs
O3 - Encrypted Valid IPsec tunnel and application access over private Tunnel telemetry and curl response
connectivity address
O4 - Bidirectional routing Accurate BGP prefixes and effective return route VyOS BGP and VPC route-table records
O5 - Security 8080 allowed for VLAN10; 22 not allowed SG rule export and positive/negative tests
enforcement
O6 - Troubleshooting One controlled fault diagnosed, corrected and retested Before/after records, root cause and resolution
WGU E030 | Task 2 | Original model implementation | Live tests pending 2
