AWS VPC Flashcards
A logical component that is managed independently in real-time, attached to an EC2 instance as the primary when an instance is provisioned; specified in only one AZ.
Elastic Network Interface (ENI)
Bound to an ENI upon deployment of an EC2 instance and cannot be removed nor changed
Primary private IP address
Primary ENI
From one of your IPs within the provisioned subnet, this address belongs to your subnet where the ENI is attached and can be changed
Secondary private IP addresses
Secondary ENI
This no-cost virtual feature supports bandwidth up to 100 Gbps, exceeding traditional network interfaces.
Enhanced Networking
The AWS feature provides Internet access; however, it must be specified in the routing table as the route of last resort.
Internet Gateways
Manage the routes and traffic entering and exiting your VPC as subnets cannot exist without one.
Route Tables
This firewall feature controls traffic to and from the ENI and must have at least one associated with the ENI, allowing only whitelisted traffic based on protocol, destination, and port in a stateful manner.
Security Groups
You can direct traffic to this ENI using all resources that have this feature attached, as well as referencing resources in another AWS account that also utilizes this security feature.
Source Security Group
A Subnet control efficiently manages both inbound and outbound traffic, acting as a stateless security feature.
Network Access Control List (NACL)
Enhanced protection that scales across multiple VPCs and subnets, offering additional security features.
AWS Network Firewall
Allocated upon request and associated with an ENI.
Elastic IP Addresses (EIP)
A non-persistent address assigned when an EC2 instance is deployed.
Public IP Addresses
Using an Anycast, the AWS feature routes traffic to resources to any region via TCP or UDP, proxying the connection to the fastest endpoint (endpoints can be EC2, ELB, or an IP)
AWS Global Accelerator
A scalable feature that proxies connections to the internet in a specific Availability Zone residing in one subnet; upon creation, we will associate an Elastic IP with it.
NAT gateway
A nonscalable resource that you manage to proxy connection to the internet, allowing for connectivity to a jump server in your VPC
NAT instance