VPC, Networking, Security and Compliance Flashcards
What is a VPC (Virtual Private Cloud)?
Hint: Think of it as your own private neighborhood in AWS.
A private, isolated network in AWS, like your own “home base” where everything happens.
What is a subnet in AWS?
Hint: These are smaller divisions tied to specific Availability Zones.
A specific network partition of a VPC tied to an Availability Zone, like “city blocks” within your neighborhood (VPC).
What does an Internet Gateway do?
Hint: It’s the VPC’s way to access the internet.
Provides internet access to the entire VPC, like the “main gate” for your neighborhood.
What is the purpose of a NAT Gateway or Instance?
Hint: This allows private subnets to connect to the internet while staying hidden.
Allows private subnets to access the internet without being exposed, like a “backdoor for private blocks.”
What is a NACL (Network ACL)?
Hint: A stateless firewall that doesn’t remember previous connections.
A stateless firewall controlling inbound and outbound traffic at the subnet level, acting like a “neighborhood gatekeeper.”
How do security groups differ from NACLs?
Hint: These firewalls remember who’s allowed in.
Security groups are stateful firewalls applied at the EC2 or ENI level, acting like “personal bouncers” who remember who’s allowed in.
What is VPC Peering?
Hint: A connection between two VPCs with a direct link.
A non-transitive connection between two VPCs with non-overlapping IP ranges, like a “friendship tunnel” between two neighborhoods.
What is an Elastic IP?
Hint: A fixed, public IPv4 address that costs if idle.
A fixed public IPv4 address that costs if not used, like a “fixed street address.”
What are VPC Endpoints used for?
Hint: Allows access to AWS services within the VPC without the internet.
Provide private access to AWS services within the VPC without going through the internet, like a “private service road.”
What is AWS PrivateLink?
Hint: Used to connect to a third-party VPC privately.
Allows private connections to a service in a third-party VPC, like a “private road to another neighborhood.”
What are VPC Flow Logs?
Hint: They act like security cameras for your VPC traffic.
Logs all traffic coming in and out of the VPC, like a “security camera” monitoring traffic.
What is a Site-to-Site VPN?
Hint: A secure tunnel connecting your data center to AWS.
A secure tunnel over the internet connecting your on-premises data center to AWS, like “tunneling between cities.”
What is AWS Client VPN?
Hint: Allows individual computers to access the VPC securely.
A personal VPN that allows individual computers to securely access your VPC, like a “personal VPN” for your neighborhood.
What is AWS Direct Connect?
Hint: A faster, private connection from your data center to AWS.
A direct, private connection from your data center to AWS, faster than the public internet, like a “private highway.”
What is an AWS Transit Gateway?
Hint: It acts as a central hub to connect multiple VPCs.
A central hub connecting multiple VPCs and on-prem networks, like a “central hub” for connecting neighborhoods.
