VPC Fundamentals Flashcards
What is a VPC for?
It’s private network to deploy your resources (regional resource)
What are Subnets?
A partition of your network inside your VPC (Availability Zone resource)
public subnet
A subnet that is accessible from the internet
private subnet
A subnet that is not accessible from the internet
How can we define access to the internet and between subnets.
Route Tables
Three features of a NACL (Network ACL)?
- Can have ALLOW and DENY rules
- Are attached at the Subnet level
- Rules only include IP addresses
Two features of a Security Groups?
- Can have only ALLOW rules
- Rules include IP addresses and other security groups
What do VPC Endpoints do?
Endpoints that allow connection to AWS Services using a private network instead of the public www network
What does an Internet Gateway at the VPC level do?
Provide Internet Access
What do NAT Gateway / Instances grant?
Internet access to private subnets
What is a NACL firewall?
Stateless, subnet rules for inbound and outbound
What is a Security Group firewall?
Stateful, controls traffic at the EC2 instance / ENI level
What is VPC Peering?
non transitive connection of two VPC with non overlapping IP ranges
VPC Flow Logs
network traffic logs
Security Groups operate at the …… level while NACLs operate at the ……. level.
EC2 instance, Subnet
