AWS Amazon VPC

Increased security

Easier management

Reduced costs

Increased flexibility

Allow instances in a private subnet to connect to the internet

Allow instances in a public subnet to connect to instances in a private subnet

Provide a public IP address for instances in a private subnet

Reduce the number of public IP addresses that you need

NAT Gateway

Internet Gateway

VPN Connection

Direct Connect

To provide a private connection to AWS services

To allow direct access to the internet from a private subnet

To manage database connections

To host web applications

Bastion Host

Internet Gateway

Security Group

NAT Gateway

It filters traffic at the application layer.

It acts as a firewall for EC2 instances

It controls access to VPC resources at the subnet level.

It manages database connections.

To securely connect to AWS services over the public internet

To establish a dedicated network connection between your on-premises data center and AWS

To create VPC peering connections

To configure VPC endpoints

Share VPC resources with other AWS accounts

Connect multiple VPCs within the same AWS account

Establish a VPN connection to AWS resources

Access public S3 buckets

It specifies which IAM users can access the VPC.

It defines the route for network traffic within the VPC.

It stores database access credentials.

It controls DNS settings for VPC resources

To control access to VPC resources at the subnet level

To filter traffic at the application layer

To establish a dedicated network connection to AWS

To manage database backups