VPC Flashcards
What is VPC?
Virtual Private Cloud
There is one default VPC in each region
What are subnets?
Subnets are a network partition of the VPC
Subnets are tied to an availability zone
What is an Internet Gateway?
at the VPC level, it provides Internet Access
What are NAT Gateway /Instances?
They give internet access to PRIVATE subnets
What are NACLS?
Stateless, subnet rules for inbound and outbound traffic
What are Security Groups?
Stateful (deny all inbound and allow all outbound)
operate at the EC2 instance level or ENI
What is VPC Peering?
Connect two or more VPCs with non overlapping IP ranges
They are non-transitive
What are VPC Endpoints?
VPC endpoint provide PRIVATE access to AWS Services within the VPC
What are VPC Flow Logs?
network traffic logs
What is Site to Site VPN?
VPN over public internet between on-premises Direct Connect (DC) and AWS
What is Direct Connect?
direct private connection to AWS
You would like to provide internet access to your instances in private subnets with IPv4, while making sure this solution requires the least amount of administration and scales seamlessly. What should you use?
NAT Gateway
Your EC2 instance in a private subnet must access the AWS APIs privately. You must keep all traffic within the AWS network. What do you recommend?
VPC Endpoints