Module 4: Networking Flashcards
What is the Amazon Virtual Private Cloud (VPC)?
A networking service that you can use to establish boundaries around your AWS resources
What is the purpose Amazon Virtual Private Cloud (VPC)?
Enables you to provision an isolated section of the AWS Cloud. In this isolated section
What is the main component of Amazon Virtual Private Cloud (VPC)?
Subnets
What is a Subnet?
Section of a VPC that can contain resources such as Amazon EC2 instances.
Types of Subnets
- Private
- Public
What is a private subnet?
Isolate of databases from public access
What is a public subnet?
Customer facing website
Types of Virtual Private Cloud (VPC) Access
- Internet Gateway
- Virtual Private Gateway
- AWS Direct Connect
What is an Internet Gateway?
Public traffic from the internet to access your VPC
What is a Virtual Private Gateway?
- A virtual private gateway enables you to establish a virtual private network (VPN) connection between your VPC and a private network, such as an on-premises data center or internal corporate network. AWS Direct Connect
- Allows traffic into the VPC only if it is coming from an approved network.
What is an AWS Direct Connect?
Service that lets you to establish a dedicated private connection between your data center and a VPC.
What are the benefits of AWS Direct Connect?
Helps you to reduce network costs and increase the amount of bandwidth that can travel through your network.
What is a Packet?
Unit of data sent over the internet or a network.
Types of Network Hardening
- Network Access Control List (Network ACL)
- Security Group
What is a a Network Access Control List (Network ACL)?
- Virtual firewall that controls inbound and outbound traffic at the subnet level.
- “Passport control” to each subnet
Network ACLs are “State-__”
Stateless
What is Stateless
Packet must be checked in and out of each instance
What is a Security Group?
- Virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.
- “Door man” to individual instances
Security Groups are “State-__”
Stateful
What is Stateful?
Remembers previous packages and let’s packets out automatically
What is a Domain Name System (DNS)?
- Translates website names into IP, or Internet Protocol, addresses that computers can read.
- “Phone Book of the Internet”
What are the steps of Route 53 and Cloud Front working together to deliver Content?
- A customer requests data from the application by going to AnyCompany’s website.
- Amazon Route 53 uses DNS resolution to identify AnyCompany.com’s corresponding IP address, 192.0.2.0. This information is sent back to the customer.
- he customer’s request is sent to the nearest edge location through Amazon CloudFront.
- Amazon CloudFront connects to the Application Load Balancer, which sends the incoming packet to an Amazon EC2 instance.
