AWS- Virtual Private Cloud
2 min readAug 5, 2024
Components :
VPC:
- Definition: A virtual network that closely resembles a traditional network in your data center.
- Key Features: Define IP address ranges, subnets, route tables, and gateways.
Subnets:
- Definition: A range of IP addresses in your VPC.
- Types: Public subnets (accessible from the internet) and private subnets (not accessible from the internet).
Route Tables:
- Definition: Set of rules (routes) that determine where network traffic is directed.
- Usage: Each subnet must be associated with a route table.
Internet Gateway (IGW):
- Definition: A gateway that allows communication between instances in your VPC and the internet.
- Usage: Attach an IGW to your VPC to enable internet access.
Network Access Control Lists (NACLs):
- Definition: An optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets.
- Usage: Stateless, meaning rules must be defined for both inbound and outbound traffic.
Security Groups:
- Definition: Virtual firewalls for your instances to control inbound and outbound traffic.
- Usage: Stateful, meaning changes to inbound rules are automatically applied to outbound rules.
Intermediate Components
NAT Gateway:
- Definition: Allows instances in a private subnet to connect to the internet or other AWS services, but prevents the internet from initiating a connection with those instances.
- Usage: Provides high availability and bandwidth.
VPC Peering:
- Definition: A networking connection between two VPCs that enables you to route traffic between them using private IP addresses.
- Usage: Can be established between your own VPCs or with a VPC in another AWS account.
Elastic IP Addresses:
- Definition: Static, public IP addresses that you can allocate to your instances.
- Usage: Useful for instances that need a consistent IP address.
Advanced Components
Transit Gateway:
- Definition: A network transit hub that you can use to interconnect your VPCs and on-premises networks.
- Usage: Simplifies network architecture and reduces the number of VPC peering connections.
VPC Endpoints:
- Definition: Enables private connections between your VPC and supported AWS services without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection.
- Types: Interface endpoints and gateway endpoints.
Traffic Mirroring:
- Definition: Allows you to capture and inspect network traffic in your VPC.
- Usage: Useful for security and monitoring purposes.
VPC Flow Logs:
- Definition: Captures information about the IP traffic going to and from network interfaces in your VPC.
- Usage: Useful for monitoring and troubleshooting network connectivity.
VPN Connections:
- Definition: Connect your VPC to your on-premises network using AWS Virtual Private Network (VPN).
- Usage: Provides secure connections over the internet.
If you found this guide helpful then do click on 👏 the button.
Follow for more Learning like this 😊
If there’s a specific topic you’re curious about, feel free to drop a personal note or comment. I’m here to help you explore whatever interests you!