(1) Connecting data VPC subnet gateway
- internet gateway
- virtual private gateway
- AWS direct connect
(2) Control the flow of data Network Access Control List (NACL) Security Groups
(3) AWS global network Route 53 - DNS
(1) Connecting data
Virtual Private Cloud (VPC)
subnet
Gateway
- internet gateway
- virtual private gateway
- AWS Direct Connect
internet gateway
public subnet = network WITH an internet gateway
private subnet = network WITHOUT an internet gateway
virtual private gateway
AWS Direct Connect
private
dedicated
high-speed
not a leased line
not an LPN network
is: physical connection (eg. fiber) connecting to Customer or Partner router
(2) control the flow of data
Network Access Control List (NACL)
in/out subnet
default: allow all inbound, allow all outbound
stateless
Security Groups
in/out instance (or group of instances)
default: deny all inbound, allow all outbound
stateful
(3) AWS global network
Route 53 - DNS
(register a domain) map names to ip
integrates nicely with CloudFront
