~3 sessions a week: read the lesson (~15 min) + run and change its section of nat/demo.py (~25 min). Tick lessons off — progress is saved in this browser.
Why NAT, how PAT works, gateway vs instance. Lab: send three desks out and read the register; knock from outside.
One per AZ, Elastic IPs. Lab: fail AZ a with one shared NAT and with one per AZ; add a second Elastic IP.
Costs, alternatives, troubleshooting. Lab: move 4,000 GB of S3 to an endpoint; fill the register; let a row time out.
Next: the VPC school builds the whole campus, the API Gateway school builds the front office, and the School portal has the rest.