VPC, subnets, route tables, NAT, security groups versus NACLs, IAM policies, roles, STS and organizations.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What is a Virtual Private Cloud (VPC)?
Show answer
An isolated network environment in AWS where you launch resources with control over IP addressing, subnets, route tables and gateways.- What is a subnet?
Show answer
A subdivision of a VPC's IP address range that exists within a single availability zone.- What distinguishes a public subnet from a private subnet?
Show answer
A public subnet has a route to an internet gateway, allowing resources to reach the internet. A private subnet does not.- What is a route table?
Show answer
A set of rules (routes) that determine where network traffic from a subnet or gateway is directed.- What is an Internet Gateway?
Show answer
A VPC component that enables communication between instances in your VPC and the internet.- What is a NAT Gateway?
Show answer
A managed service in a public subnet that allows private instances to initiate outbound connections while blocking inbound traffic from the internet.- What is the key difference between a NAT Gateway and a NAT Instance?
Show answer
NAT Gateway is a fully managed AWS service with built-in high availability. NAT Instance is a regular EC2 instance you must manage.- What is an Elastic IP address?
Show answer
A static public IPv4 address associated with your AWS account that persists when you stop or start an instance.- What is a VPC CIDR block?
Show answer
The primary IPv4 address range for your VPC, specified in CIDR notation, such as 10.0.0.0/16.- What is a Network ACL (NACL)?
Show answer
A stateless firewall at the subnet level that controls inbound and outbound traffic using numbered rules.- What is a security group?
Show answer
A stateful firewall at the instance level that controls inbound and outbound traffic by protocol, port and source or destination.- How do NACLs and security groups differ in terms of statefulness?
Show answer
NACLs are stateless and evaluate return traffic with explicit rules. Security groups are stateful and automatically allow return traffic.- What is a VPC endpoint?
Show answer
A private connection from your VPC to AWS services that keeps traffic within AWS without crossing the public internet.- What is VPC peering?
Show answer
A network connection between two VPCs that enables private IP traffic between instances as if on the same network.- What do VPC Flow Logs capture?
Show answer
Information about IP traffic to and from network interfaces in your VPC for monitoring and troubleshooting.
FlashKeepers