Networking Flashcards
What does VPC stand for?
Virtual Private Cloud
What does VPC do?
Establishes a boundary around your AWS resources
What is a subnet?
A subnet is a section of the VPC that you can use to group resources based on security or operational needs
Can subnets be public or private?
Yes
What is a packet?
A unit of data sent over the internet
Name 2 security mechanisms to control traffic?
Network ACLs
Security Groups
What is the difference between where Network ACLs and Security Groups operate?
Networks ACLs operate at the subnet level and Security Groups operate at the instance level
Are Network ACLs and Security Groups stateful or stateless?
Network ACLs are stateless (require rules for in and out traffic)
Security Groups are stateful (default deny all traffic in and out by default)
Default state for Security Group is …
Deny inbound traffic
Allow outbound traffic
Describe the order of components from client -> instance
client -> internet -> internet gateway -> cloud -> internet gateway -> vpc -> subnet with instances
AWS Direct Connect..
connection between your on-premises data center and a VPC
Give an example of a public subnet?
Online store
Give an example of a private subnet?
Database
What is the default for network ACL?
Allow all traffic in and out (but you can modify by adding your own rules)
Can you configure custom rules for network ACLs and security groups?
Yes
What is Amazon 53?
route end users to internet apps hosted by aws (helping dns management)
What is Domain Name System (DNS) resolution?
DNS resolution is the process of translating a domain name to an IP address
What is used to access private resources in a VPC?
A virtual private gateway is used to access private resources in a VPC by creating a VPN
Name 2 benefits of AWS Direct Connect
- Helps reduce network costs
- Increases the amount of bandwidth that can travel through your network
What is the explicit deny rule Network ACLs have?
if a packet doesn’t match any of the other rules on the list, the packet is denied
Name a “content delivery service that uses a network of edge locations to cache content and deliver content to customers all over the world”?
CloudFront
How does CloudFront and Route 53 work together to deliver content?
Customer makes request ->
Route 53 uses DNS resolution to identify an IP address and sends this info back to the customer ->
Customer’s request sent to nearest edge location through CloudFront ->
CloudFront connects to the App Load Balancer which sends the incoming packet to an EC2 instance
A private subnet is a section of a VPC which you can group resources that should only be accessed…
through your private network
A security group is a…
“virtual firewall that controls traffic in and out of an EC2 INSTANCE”
