AWS Networking

Question 1

What is networking?

Answer 1

Networking is how you connect computers around the world and allow them to communicate with one another. In this trail, you’ve already seen a few examples of networking.

Question 2

What is an IP Address?

Answer 2

An IP (Internet Protocol) address is a unique numerical label assigned to each device connected to a computer network that uses the Internet Protocol for communication.

Question 3

What is CIDR?

Answer 3

CIDR (Classless Inter-Domain Routing) notation is a method for specifying IP addresses and their associated routing prefix. It is used to define IP address ranges more flexibly and efficiently than the traditional class-based IP addressing system. CIDR notation helps improve the allocation of IP addresses and supports more efficient routing.

192.168.1.0/24 means 8 bits are flexible (32 - 24)

Question 4

What is a VPC?

Answer 4

A Virtual Private Cloud is an isolated network you create in the AWS cloud.

Question 5

What 3 main things do you choose when you create a VPC?

Answer 5

1. Name of your VPC
2. A Region for your VPC to live in
3. A IP range for your VPC in CIDR notation. This determines the size of your network.

Question 6

When creating a subnet, what should you consider?

Answer 6

1. The VPC you want the subnet to live in
2. The AZ you want your subnet to live in
3. A CIDR block for your subnet

Question 7

When you divide you VPC into segments, what is this called?

Answer 7

This is called a ‘Subnet’. Think of subnets as smaller networks inside your base network.

Question 8

For High Availability in your VPC, what should you consider?

Answer 8

Create 2 subnets within each Availability Zone. 2 public and 2 private according to AWS documentation.

Question 9

What is an ‘Internet Gateway’?

Answer 9

An internet gateway enables internet connectivity for your VPC. Just as a modem connects your computer to the internet, the internet gateway connects your VPC to the internet.

Question 10

What is a Virtual Private Gateway?

Answer 10

A virtual private gateway allows you to connect your AWS VPC to another private network. The flow is on-premise to AWS. Considered Site to Site.

Question 11

When you create a ‘VPC’, another table is created. What is this called?

Answer 11

This is called the main route table.

A route table contains a set of rules, called routes, that are used to determine where network traffic is directed.

Question 12

Two main parts to a route table?

Answer 12

1. Destination: Which is a range of IP addresses where you want your traffic to go.
2. Target: Which is the connection through which to send the traffic. A local VPC network as an example.

Question 13

What is a network ACL?

Answer 13

Stateless

A network access control list (NACL) in Amazon Web Services (AWS) is a firewall that controls traffic in and out of subnets.

In AWS, traffic typically hits a Network Access Control List (ACL) first, before reaching a Security Group, as ACLs operate at the subnet level, filtering traffic before it reaches the individual instances controlled by security groups which operate at the instance level.

The default network ACL allows all traffic in and all traffic out of your subnet.

Question 14

What is a security group?

Answer 14

Firewalls that exist at the EC2 instance level.

Not option. Need to place EC2 instance inside a security group.

By default, blocks all inbound and allows all outbound.

Question 15

How can you connect a remote data center to AWS?

Answer 15

AWS VPN

AWS Direct Connect

Question 16

What is AWS Direct Connect?

Answer 16

AWS Direct Connect is a cloud service solution that enables you to establish a dedicated, private network connection from your on-premises data center or office to AWS without using the public internet.

Question 17

What is AWS Managed VPN and name types of Managed VPN

Answer 17

AWS Managed VPN is a service provided by Amazon Web Services that allows you to securely connect your on-premises network or remote offices to your Amazon Virtual Private Cloud (VPC) over an encrypted VPN connection.

1. Site-to-Site VPN: This connects your on-premises or remote networks to your VPC (on-premises to cloud). A customer gateway provides information to AWS. A virtual private gateway is the VPN on the Amazon side.

2.Cloud Hub: If you have more than one remote network (for example, multiple branch offices), you can create multiple AWS Site-to-Site VPN connections via your virtual private gateway to enable communication between these networks.

3. Client VPN: This provides secure access for your remote workforce (individual people) to connect to AWS resources.
4. You can create a VPN connection to your remote network by using an Amazon EC2 instance in your VPC that’s running a third party software VPN appliance.

Question 18

What is AWS Transit Gateway?

Answer 18

AWS Transit Gateway connects your VPCs and on-premises networks through a central hub. This arrangement simplifies your network and minimizes complex peering relationships.

VPC peering is a technique that securely connects two or more Virtual Private Clouds (VPCs) so that resources in each network can communicate with each other

Great when you have multiple connections between different components.