Amazon VPC mindmap
Amazon VPC
A logically isolated virtual network for your AWS resources
Addressing
: IP ranges for VPCs and subnets
CIDR blocks
: IPv4 from /16 to /28; IPv6 optional
Subnets
: One Availability Zone each; public, private or VPN-only
Reserved addresses
: Five IP addresses are reserved in every subnet
Amazon VPC IP Address Manager
: Plan and track IP addresses across accounts
Routing
: How traffic leaves a subnet
Route tables
: Associated with subnets; the most specific route wins
Internet gateway
: Two-way internet access for public subnets
NAT gateway
: Outbound-only internet access for private subnets
Egress-only internet gateway
: Outbound-only IPv6 traffic
Traffic filtering
Security groups
: Stateful, allow rules only, on network interfaces
Network ACLs
: Stateless, numbered allow and deny rules, on subnets
AWS Network Firewall
: Managed stateful inspection and IPS
Private access to services
Gateway endpoints
: Amazon S3 and DynamoDB through the route table, at no cost
Interface endpoints
: Private IP addresses for AWS services and your own services
Connectivity
VPC peering
: One-to-one private routing; not transitive
AWS Transit Gateway
: Hub for many VPCs and on-premises networks
AWS Site-to-Site VPN
: IPsec VPN to your data center
AWS Direct Connect
: Dedicated private connection
Monitoring
VPC Flow Logs
: IP traffic metadata to CloudWatch Logs, S3 or Data Firehose
Reachability Analyzer
: Test whether two resources can reach each other
Traffic Mirroring
: Copy packets for deep inspection
All maps
Amazon VPC
Networking and content delivery
Show outline
Zoom out
100%
Zoom in
Open every topic
Close every topic
Present
Resources
Copy link
More
Amazon VPCNetworking and content deliveryAmazon VPCNetworking and content delivery