AWS VPC

Amazon Virtual Private Cloud #

An AWS VPC (Virtual Private Cloud) is a virtual network dedicated to an AWS account. It enables users to launch AWS resources, like EC2 instances, within a logically isolated section of the AWS Cloud. With a VPC, users have control over their network environment, including IP address ranges, subnets, route tables, and network gateways. VPCs allow for greater security, customization, and connectivity options, enabling users to create a network that mirrors a traditional data center setup in the cloud.

Isolated Networking Environment #

VPC allows the creation of a virtual network environment that closely resembles a traditional network infrastructure but within the AWS cloud. A VPC offers control over network configuration, IP addressing, routing, and security settings.

Subnets #

Within a VPC, multiple subnets can be created, each residing in a different Availability Zone. Subnets allow the segmentation of resources and provide fault tolerance by spreading resources across different physical locations.

See more details about AWS Subnets and AWS Route Tables.

IP Addressing #

IP address ranges are defined for the VPC, subnets, and network interfaces, allowing control over IP address assignment within the AWS infrastructure.

Internet and Private Access #

VPCs can be configured to connect to the Internet through an Internet Gateway, enabling resources within the VPC to access the Internet or be accessed from the Internet if configured. Additionally, private connectivity options like Virtual Private Network (VPN) or AWS Direct Connect provide access to resources without exposure to the public Internet.

Security Controls #

VPC allows setting up security groups and network access control lists (ACLs) to control inbound and outbound traffic to instances and resources within the VPC.

Peering and Connectivity #

VPC Peering enables connection between different VPCs, allowing them to communicate using private IP addresses. Transit Gateway simplifies connectivity between multiple VPCs, VPNs, and on-premises networks (LANs).

Customization and Integration #

VPC can be customized to integrate with various AWS services like EC2, RDS, S3, and more, providing a secure and scalable infrastructure for deploying and running applications.