Amazon VPC Concepts: Difference between revisions
| Line 12: | Line 12: | ||
=<span id='VPC'></span>Virtual Private Cloud (VPC)= | =<span id='VPC'></span>Virtual Private Cloud (VPC)= | ||
A VPC is a virtual network dedicated to an AWS account and logically isolated from other virtual networks in the AWS Cloud. It can be thought of as an isolated portion of the AWS Cloud populated by AWS objects, such as Fargate tasks. The VPC has an IP address range, specified as a [[#CIDR_Block|CIDR Block]]. A VPN uses [[#Subnet|subnets]], [[#Security_Group|security groups]] and [[#Route_Table|route tables]]. | A VPC is a virtual network dedicated to an AWS account and logically isolated from other virtual networks in the AWS Cloud. It can be thought of as an isolated portion of the AWS Cloud populated by AWS objects, such as Fargate tasks. The VPC has an IP address range, specified as a [[#CIDR_Block|CIDR Block]]. A VPN uses [[#Subnet|subnets]], [[#Security_Group|security groups]] and [[#Route_Table|route tables]]. | ||
Revision as of 22:40, 6 February 2019
External
Internal
Overview
Amazon VPC provides a logically isolated section of the AWS Cloud where AWS resources run in a private virtual network.
Virtual Private Cloud (VPC)
A VPC is a virtual network dedicated to an AWS account and logically isolated from other virtual networks in the AWS Cloud. It can be thought of as an isolated portion of the AWS Cloud populated by AWS objects, such as Fargate tasks. The VPC has an IP address range, specified as a CIDR Block. A VPN uses subnets, security groups and route tables.
VPC ID
CIDR Block
10.0.0.0/16
Block sizes must be between /16 netmask and /28 netmask.
Subnet
A subnet is a range of IP addresses in the Virtual Private Cloud (VPC) that can be used to isolate different EC2 resources or ECS services from each other, within the same VPC, or from the Internet. The range of IP addresses in the subnet must be a subset of the IP address in the VPC. Block sizes must be between /16 netmask and /28 netmask. The size of the subnet can equal the size of the VPC. Each subnet resides in one Availability Zone. Subnets enable you to group instances based on security and operational needs.
To enable instances in a subnet to reach the Internet and AWS services, you must add an Internet gateway to the VPC and a route table with a route to the Internet to the subnet.
Example:
subnet-53993c24: 172.31.16.0/20