SERVICE DOMAIN
Networking
Build isolated and secure cloud networks.PUBLIC NOTES
Knowledge Notes
Amazon VPC
A logically isolated network in an AWS Region where you define address ranges, subnets, routes, and security controls.
→Internet Gateway
A highly available internet entry and exit point attached to a VPC; it does not automatically make every resource publicly reachable.
→NAT Gateway
Gives private IPv4 resources outbound access to the internet or public services without accepting internet-initiated connections.
→Network ACL
A stateless subnet-boundary access control list that supports both allow and deny rules.
→Security Group
A stateful, allow-only virtual firewall attached to an ENI or supported resource, central to resource-level least privilege in AWS.
→Subnet & Route Table
A subnet divides the VPC address space and belongs to one Availability Zone; a route table selects the next hop based on the destination.
→TOPIC INDEX