AWS Service

Amazon VPC

A VPC is the network boundary for subnets, routing, gateways, endpoints, and network-level controls.

What This Service Solves

A VPC is the network boundary for subnets, routing, gateways, endpoints, and network-level controls.

  • Use public subnets for internet-facing load balancers, private subnets for workloads, and VPC endpoints for private AWS service access.

When You Should Not Use It

  • Do not put databases in public subnets just because an app needs internet egress. Use NAT or endpoints.

What AWS Manages and What You Manage

AWS provides the virtual networking fabric. You manage CIDR ranges, subnets, route tables, gateways, NACLs, security groups, and DNS behavior.

Security Implications

Security groups are stateful instance/resource firewalls. NACLs are stateless subnet filters. Route tables decide where traffic can go.

Availability and Scaling

Subnets live in one AZ. Multi-AZ designs need subnets and resources in multiple AZs.

Plan CIDR space, endpoint scale, NAT throughput, and load balancer placement before growth.

Cost Behavior

NAT gateways, data transfer, endpoints, load balancers, and cross-AZ traffic are frequent cost clues.

Common Integrations

  • EC2
  • RDS
  • Lambda VPC access
  • PrivateLink
  • Transit Gateway
  • Direct Connect
  • VPN

How AWS Might Present It

Certification-Specific Depth

Sources and Review Metadata

This independent training application is not affiliated with or endorsed by Amazon Web Services. AWS, Amazon Web Services, and AWS certification names are trademarks of Amazon.com, Inc. or its affiliates.