AWS VPC Flashcards
A logical component that is managed independently in real-time, attached to an EC2 instance as the primary when an instance is provisioned; specified in only one AZ.
Elastic Network Interface (ENI)
Bound to an ENI upon deployment of an EC2 instance and cannot be removed nor changed
Primary private IP address
Primary ENI
From one of your IPs within the provisioned subnet, this address belongs to your subnet where the ENI is attached and can be changed
Secondary private IP addresses
Secondary ENI
This no-cost virtual feature supports bandwidth up to 100 Gbps, exceeding traditional network interfaces.
Enhanced Networking
The AWS feature provides Internet access; however, it must be specified in the routing table as the route of last resort.
Internet Gateways
Manage the routes and traffic entering and exiting your VPC as subnets cannot exist without one.
Route Tables
This firewall feature controls traffic to and from the ENI and must have at least one associated with the ENI, allowing only whitelisted traffic based on protocol, destination, and port in a stateful manner.
Security Groups
You can direct traffic to this ENI using all resources that have this feature attached, as well as referencing resources in another AWS account that also utilizes this security feature.
Source Security Group
A Subnet control efficiently manages both inbound and outbound traffic, acting as a stateless security feature.
Network Access Control List (NACL)
Enhanced protection that scales across multiple VPCs and subnets, offering additional security features.
AWS Network Firewall
Allocated upon request and associated with an ENI.
Elastic IP Addresses (EIP)
A non-persistent address assigned when an EC2 instance is deployed.
Public IP Addresses
Using an Anycast, the AWS feature routes traffic to resources to any region via TCP or UDP, proxying the connection to the fastest endpoint (endpoints can be EC2, ELB, or an IP)
AWS Global Accelerator
A scalable feature that proxies connections to the internet in a specific Availability Zone residing in one subnet; upon creation, we will associate an Elastic IP with it.
NAT gateway
A nonscalable resource that you manage to proxy connection to the internet, allowing for connectivity to a jump server in your VPC
NAT instance
Allows instances in your VPC outbound connections over IPv6 while preventing the internet from initiating an IPv6 connection to your instances
Egress-only internet gateways
Enables seamless access to VPC resources and services, while providing low-latency connectivity to on-premises systems by connecting directly to the AWS data center, bypassing the Internet.
AWS PrivateLink
A point-to-point connection between only two VPCs
VPC Peering
Allows you to connect to public services within a VPC without going through the public internet.
VPC Endpoint
AWS service that enables connection to multiple VPCs and on-premises networks using AWS Direct Connect or a VPN.
AWS Transit Gateway
Using AWS Privatelink This approach is useful when you need to transfer large data sets or real-time data or meet regulatory requirements that preclude transferring data over the Internet.
AWS Direct Connect
A global resource that provides a single connection point to multiple VPCs in a region, maintaining a BGP session with your on-prem equipment
Direct Connect Gateways
Enables connection to private IP addresses of resources within a VPC, including EC2 and RDS instances.
Private Virtual Interface (VIFs)
Enables connection to AWS services with a public endpoint, such as S3 and DynamoDB.
Public Virtual Interface (VIFs)
Offers connectivity to one or more AWS Transit Gateways.
Transit Virtual Interface (VIFs)
Service supports BGP and IPv6, enabling you to connect two on-premises sites to AWS VPC.
Direct Connect SiteLink
Uses multiple instances to simultaneously process intensive computational workloads in parallel. These instances comprise an in a cluster.
High-Performance Computing
Workloads are broken up into smaller tasks that each instance can work independently.
Loosely Coupled (HPC)
Requires massive computing power that cannot be broken up. Instances work together in concert singularly.
Tightly coupled (HPC)
A particular type of enhanced network adaptor for high-performance computing that bypasses the TCP/IP stack for additional throughput and reduced latency.
Elastic Fabric Adapter
Automatically manage your Linux-based HPC cluster so you don’t have to do it manually.
AWS ParallelCluster
