VPC Flashcards
VPC Components
There are 11 elements in the answer
- Internet Gateway (IGW)
- Virtual Private Gateway
- Routing tables
- Network Access Control Lists (NACLs)
- Security Groups (SG)
- Public Subnets
- Private Subnets
- Nat Gateway
- Customer Gateway
- VPC Endpoints
- VPC Peering
How many VPCs per region can you create?
5
How many subnets per VPC can you have?
200
In VPC, What elements can you use for free?
There are 6 elements in the answer
- Route tables
- NACLs
- Internet Gateway
- Security groups
- Subnets
- VPC Peering
In VPC, What elements can you use paying some money?
There are 4 elements in the answer
- NAT gateway
- VPC Endpoints
- VPN Gateway
- Customer Gateway
What can you set when creating a VPC?
There are 4 fields
- Name tag
- IPv4 CIDR Block (10.0.0.0/16)
- IPv6 CIDR Block (The adress of the VPC)
- Tenacy (Default or dedicated hardware)
What does it come with a default VPC?
- A subnet in each AZ
- Internet Gateway
- Security group
- NACLS
- DHCP
- Route Table
What is the purpose of the default VPC in each region?
You can start deploying your instances immediately
What does VPC Peering allow you to do?
Securely connect multiple VPCs together over a direct route
No Transitive Peering (peering must take place directly between VPCs)
This VPC feature lets you connect one VPC with another, over a direct network route using private IP addresses
VPC Peering
This VPC component is used to determine where network traffic is directed
dəˈtɜrmən
Route Tables
In VPC, What do you have to associate with your route table?
Route Tables are used to determine where network traffic is directed
Subnets
In VPC, How many subnets can have a route table?
As much as you want
In VPC, How many route tables can be associated with a subnet?
One route table at a time
This VPC component allows your VPC to access the internet
Internet Gateway (IGW)
What does an Internet Gateway do?
It does two things
It provides a …
It performs …
- It provide a target in your route tables for internet traffic
- It performs network address translation (NAT)
In VPC, Should a bastion host be located in a Public, or Private subnet?
Public
Which AWS service removes the need for bastion hosts?
- System Manager
- Amazon EC2 Systems Manager.
Systems Manager allows you to remotely execute commands on managed hosts without using a bastion host (you might know this feature as EC2 Run Command). A host-based agent polls Systems Manager to determine whether a command awaits execution.
In VPC, This type of host is a security hardened image used for secure SSH or RDP access to a private subnet
Bastion Host / Jump Box
What is a Bastion or Jumpbox?
Bastions are EC2 instances which are security harden.
They are designed to help you gain access to your EC2 Instances via SSH or RCP That are in a private subnet.
AWS solution for establishing dedicated network connections from on-premises locations to AWS.
AWS Direct Connect
On-Premise > 1GB to 10GB
Helps reduce network costs and increase bandwidth throughput. (great for high traffic networks)
Fast -> Amazon S3
What are the 2 types of VPC Endpoints?
Gateway Endpoints
Interface Endpoints
What do VPC endpoints allow you to do?
Keep all traffic between your VPC and other AWS services inside of the AWS network
True or False, a VPC endpoint eliminates the need for an internet gateway, NAT device, VPN, or DirectConnect Connection
True
If you have an instance inside a VPC and you want to connect to a S3, you could do that through the internet gateway but it would be more convenient if you access to it using a Router > VPC Endpoint > S3 without the need for an internet gateway
In VPC, Interface Endpoints are…
Elastic Network Interfaces (ENI) with a private IP address.
They serve as an entry point for traffic going to a supported service.
If an instance fails you can disconnect that ENI from your failed instance and attach it to the new instance
ENI is like a network card
In VPC, Which AWS service powers interface endpoints?
Interface Endpoints are powered by AWS PrivateLink
ˈpraɪvɪt lɪŋk
In VPC, What is a Gateway Endpoint?
It is for supported AWS services only. You specify a gateway endpoint as a route table target for traffic destined to the following AWS services:
S3 and DynamoDB
In VPC, How much do VPC Gateway Endpoints cost?
Free
In VPC, What are the only supported 2 services VPC Gateway Endpoints?
S3
DynamoDB
VPC Private gateway and your on premise network
You can connect your VPC with your On-Premise network and you can access your resources because you’d be within your VPC
What is VPC?
It’s a service that enables you to launch AWS resources into a virtual network that you’ve defined
