(1) Connecting data

VPC

subnet

gateway

• internet gateway

• virtual private gateway

• AWS direct connect

(2) Control the flow of data

Network Access Control List (NACL)

Security Groups

(3) AWS global network

Route 53  - DNS

(1) Connecting data

Virtual Private Cloud (VPC)

subnet

Gateway

• internet gateway

• virtual private gateway

• AWS Direct Connect

internet gateway

public subnet = network WITH an internet gateway

private subnet = network WITHOUT an internet gateway

virtual private gateway

AWS Direct Connect

private

dedicated

high-speed

not a leased line

not an LPN network

is: physical connection (eg. fiber) connecting to Customer or Partner router

(2) control the flow of data

Network Access Control List (NACL)

in/out subnet

default: allow all inbound, allow all outbound

stateless

Security Groups

in/out instance (or group of instances)

default: deny all inbound, allow all outbound

stateful

(3) AWS global network

Route 53  - DNS

(register a domain)

map names to ip

integrates nicely with CloudFront