VPC Flashcards
What is Amazon VPC?
VPC lets you provision a logically isolated section of the AWS cloud where you can launch AWS resources in a virtual network that you define.
What are the components of Amazon VPC? (8)
VPC, Subnet, IGW, NAT Gateway, Virtual private gateway, peering connection, VPC endpoints, egress-only internet gateway
VPC - What is a subnet?
A segment of a VPC’s IP address range where you can place groups of isolated resources
VPC - What is IGW?
Internet gateway; the Amazon VPC side of a connection to the public internet
VPC - What is NAT gateway?
A highly available, managed Network Address Translation service for your resources in a private subnet to access the Internet
VPC - What is Virtual private gateway?
The Amazon VPC side of a VPN connection.
VPC - What is peering connection?
Enables you to route traffic via private IP addresses between two peered VPCs.
What are VPC endpoints?
Enables private connectivity to services hosted in AWS, from within VPC without using IGW, VPN, NAT, or firewall proxies
VPC - What is egress-only IGW?
A stateful gateway to provide egress only access for IPv6 traffic from VPC to internet
What are the 4 basic options for VPC network architectures?
- Amazon VPC with a single public subnet only
- Amazon VPC with public and private subnets
- VPC with public and private subnets and AWS Site-to-Site VPN access
- VPC with private subnet only and AWS Site-to-Site VPN access
What are the two different types of VPC endpoints?
Gateway type endpoints - only available for AWS services including S3, DynamoDB.
Interface type endpoints provide private connectivity to services powered by PrivateLink, such as AWS services, SaaS solutions, Direct Connect.
True or false: there are no additional charges for creating and using the VPC itself.
True
True or false: there are no additional charges when accessing AWS resources via VPN connection.
False. You will incur Internet data transfer charges.
What are the bandwidth limitations for IGWs?
Trick question! None.