Core Concepts
- A VPC is a logically isolated network in AWS.
- Subnets divide a VPC across Availability Zones.
- Route tables control where network traffic is directed.
- Internet gateways allow internet connectivity for public subnets.
- NAT gateways allow outbound internet access from private subnets.
Security
- Security groups are stateful and attached to network interfaces or instances.
- Network ACLs are stateless and apply at the subnet level.
- VPC endpoints let private resources reach supported AWS services without using the public internet.
- AWS VPN and Direct Connect connect on-premises networks to AWS.
Exam Cues
- Private subnet needs outbound internet only: NAT gateway.
- Private connectivity to S3 or DynamoDB: gateway endpoint.
- Dedicated private network connection from data center to AWS: Direct Connect.
Practice VPC Questions
Put your knowledge to the test with practice questions.