AWS Service
Amazon VPC
A VPC is the network boundary for subnets, routing, gateways, endpoints, and network-level controls.
What This Service Solves
A VPC is the network boundary for subnets, routing, gateways, endpoints, and network-level controls.
- Use public subnets for internet-facing load balancers, private subnets for workloads, and VPC endpoints for private AWS service access.
When You Should Not Use It
- Do not put databases in public subnets just because an app needs internet egress. Use NAT or endpoints.
What AWS Manages and What You Manage
AWS provides the virtual networking fabric. You manage CIDR ranges, subnets, route tables, gateways, NACLs, security groups, and DNS behavior.
Security Implications
Security groups are stateful instance/resource firewalls. NACLs are stateless subnet filters. Route tables decide where traffic can go.
Availability and Scaling
Subnets live in one AZ. Multi-AZ designs need subnets and resources in multiple AZs.
Plan CIDR space, endpoint scale, NAT throughput, and load balancer placement before growth.
Cost Behavior
NAT gateways, data transfer, endpoints, load balancers, and cross-AZ traffic are frequent cost clues.
Common Integrations
- EC2
- RDS
- Lambda VPC access
- PrivateLink
- Transit Gateway
- Direct Connect
- VPN
How AWS Might Present It
Certification-Specific Depth
Cloud Practitioner
Know what the service does and when it is the right family.
Solutions Architect Associate
Know configuration choices, integrations, failure modes, security, operations, and cost tradeoffs.
CloudOps Engineer Associate
Know configuration choices, integrations, failure modes, security, operations, and cost tradeoffs.
Sources and Review Metadata
This independent training application is not affiliated with or endorsed by Amazon Web Services. AWS, Amazon Web Services, and AWS certification names are trademarks of Amazon.com, Inc. or its affiliates.