Module 1: AWS Networking services Flashcards
What is VPC?
Is a virtual Private Network that englobe some of your services in aws and allow them to connect with internet or other applications.
What is AWS Private Link?
Is a network service that allows your VPC, on premise infrastructure and other AWS services to connect without exposing them to internet connection. This service also helps you to configure connections more easy because you don’t need to use internet gateways, route tables, VPC peering and other services in other to connect your services. Demo: https://www.youtube.com/watch?v=0bHXWIM4_0o&ab_channel=Pythoholic
What is VPC peering?
Is a network connection that is used to connect two VPC allowing IPV4 or IPV6 traffic between. This helps you to avoid internet or other sources to connect your VPCs or to connect your VPCs with other AWS account’s VPC. Demo : https://www.youtube.com/watch?v=w-5lSvqSkjs&ab_channel=Pythoholic
What is VPC subnet?
A subnet is a group of IPV4 or IPV6 IPS that are connected between them in order to do a specific task. Demo: https://www.youtube.com/watch?v=IncOrb4yhgU&ab_channel=TomGregory
What is a VPC public subnet?
A public subnet is connected to internet thanks to an internet gateway, the services that are associated with public subnets in general a client oriented services like web pages because we need clients to interact with those services.
What is VPC private Subnet?
A private subnet is a network that is not connected to the internet an for that reason is not connected with an internet gateway. if we want to connect private subnet with internet we use a NAT gateway. We use private subnets to things we want to use in corporate environment and things we don’t want to show to the public, for example a database or confidential information.
Does all IP’s are allowed in AWS?
All IPS are allowed but for every amount of IP we have to reserve 4 IPS. One for broadcasting, other because is the IP of the network and obviously the IP for the gateway.
What is AWS Direct Connect?
Is a Networking service that help you to connect your on service infrastructure with AWS direct connect routers in order to access to all AWS services without internet.
What is Routing and what is a Route table?
Routing is the process of organizing the connections inside a Network. A Route table is created in your VPC subnets to organize the traffic and destination of your Network, the route table has two columns “|Destination|Target|” for example if we want to connect to internet the destination would be “0.0.0.0/0” and the target is the internet gateway name of the VPC because we are using this to connect to internet.
What is a security group?
Is a subnet security option that acts like a firewall that allows inbound or outbound traffic for your instance. Every VPC comes with a default security group that deny inbound traffic but allows out bound traffic. You can’t create deny rules for security groups. Demo: https://www.youtube.com/watch?v=ATeu9UEUx6w&ab_channel=Pythoholic
What is a network access control list?
A network ACL is a subnet security option that allow inbound or outbound traffic for an specific subnet. Each subnet only can have an ACL and this ACL is in charge to allow or deny traffic in your subnet. An ACL inspect not only the traffic that comes to you subnet but also inspect the traffic that go to outside form your subnet. Demo: https://www.youtube.com/watch?v=FILtmSzLy0A&ab_channel=JuanGuillermoRodriguez
What is a network access control list?
A network ACL is a subnet security option that allow inbound or outbound traffic for an specific subnet. Each subnet only can have an ACL and this ACL is in charge to allow or deny traffic in your subnet. An ACL inspect not only the traffic that comes to you subnet but also inspect the traffic that go to outside form your subnet. Demo: https://www.youtube.com/watch?v=FILtmSzLy0A&ab_channel=JuanGuillermoRodriguez
What are the differences between a Security Group and a ACL?
Security Group:
- Operate in a instance level, only allow rules, Return traffic is automatically allowed, inspect all rules in order to allow traffic, Applies only to EC2 instances and the services hosted in those EC2 instances (backend servers), we can associate at max 5 security group for each instance.
ACL:
- Operates at subnet level, support allow and deny rules, Return traffic must be explicitly allowed by rule, we process rules in order number, applies to all services inside the subnet, a subnet can only have an ACL/
Can we use security groups with ACL?
Yes we can create an EC2 instance with it’s security group inside a Subnet with it’s ACL.
What is an internet Gateway?
Is like a door that you can attach to your VPC to connect your VPC with internet. Demo: https://www.youtube.com/watch?v=35zd1FAMrjA&ab_channel=RubenJGarcia
