Networking Flashcards
What establishes boundaries around your AWS resources?
Amazon Virtual Private Cloud (VPC)
How can public traffic get past your VPC?
Through an internet gateway
How can your private traffic get past your VPC?
Through a virtual private gateway that connects your VPC with your internal corporate network.
What does AWS Direct Connect do?
Reduces network costs
Increases bandwidth available for your network
Provides a dedicated connection between your data center directly to the VPC
How do you isolate resources within a VPC for security or operational purposes?
Place them in a subnet. Subnets isolate databases containing customers’ personal information. Public subnets support customer-facing interfaces (e.g. your website)
What is a Network access control list (ACL)?
A component of a VPC that checks packet permissions for access to subnets.
An ACL is a virtual firewall at the subnet level
Is a network ACL stateless or stateful?
Network ACLs perform stateless packet filtering. They remember nothing. By default, they allow all inbound AND outbound traffic, but are configurable.
What checks permissions at the instance level?
The security group. By default, a security group denies all inbound traffic and allows all outbound traffic.
Are security groups stateless or stateful?
Security groups perform stateful packet filtering. They remember previous decisions made for incoming packets.
What is Amazon Route 53?
A DNS (domain name service)
Route 53 directs traffic to your website, and can manage all your domain names in one place.
What is DNS resolution?
Translating a domain name into an IP address
