githubEdit

AWS Virtual Private Cloud (VPC)

Amazon Virtual Private Cloud (VPC) is a service provided by Amazon Web Services (AWS) that allows you to create a private, isolated section of the AWS cloud where you can launch AWS resources such as EC2 instances, RDS databases, and Lambda functions. VPC enables you to define and control a virtual network environment, including subnets, route tables, and network gateways, giving you full control over your cloud infrastructure's networking configuration.

Key features of Amazon VPC include:

  1. Isolated Virtual Network: VPC provides a logically isolated section of the AWS cloud where you can deploy your resources. You can define your own IP address range, subnets, and routing tables, creating a private network environment that is isolated from other VPCs and the internet.

  2. Subnet Configuration: Within a VPC, you can create multiple subnets, each with its own IP address range and availability zone. Subnets allow you to segment your network and control the placement of your resources within the AWS infrastructure.

  3. Internet and VPN Connectivity: VPC allows you to connect your virtual network to the internet or your on-premises data center using internet gateways, virtual private gateways, or AWS Direct Connect. This enables you to access public internet resources from your VPC and establish secure, private connections between your VPC and your on-premises network.

  4. Security and Access Control: VPC provides built-in security features, such as security groups and network ACLs (Access Control Lists), for controlling inbound and outbound traffic to your resources. You can define granular security policies to restrict access to your VPC resources based on IP addresses, ports, and protocols.

  5. Integration with AWS Services: VPC seamlessly integrates with other AWS services, such as EC2, RDS, Lambda, and S3. You can launch AWS resources directly into your VPC and control their network settings, allowing you to build highly scalable and secure applications on the AWS platform.

  6. Elastic Network Interfaces: VPC allows you to create elastic network interfaces (ENIs) and attach them to your EC2 instances. ENIs provide additional networking capabilities, such as multiple IP addresses, elastic IP addresses, and network interfaces for high availability and fault tolerance.

  7. VPC Peering: VPC peering allows you to establish private, low-latency connections between VPCs within the same AWS region. This enables you to route traffic between VPCs without traversing the public internet, providing a secure and efficient way to communicate between different application environments or departments.

Overall, Amazon VPC provides a flexible and scalable networking infrastructure for deploying and managing your AWS resources in a secure and isolated environment. It is a fundamental building block of cloud computing on the AWS platform, enabling you to build highly available, scalable, and secure applications in the cloud.

In simpler terms:

  • Used to create an isolated infrastructure within the cloud, including subnets and so on.

  • If the VPC has an internet gateway, means its a public subnet

  • Every VPC can have Network ACL's

Last updated