Amazon Virtual Private Cloud

✅ Amazon Virtual Private cloud(Amazon VPC): A networking service that you can establish boundaries around your aws resources is amazon vpc.

✅ Amazon vpc enables you to provision an isolated section of the aws cloud,in this isolated section you can launch resources in a virtual network that you define.

✅ Within a virtual private cloud you can organize your resources into a subnets.

✅ A subnet is a section of the vpc that you can contain resouces such as amazon EC2 instances.

✅ Internet Gateway: To allow public traffic from the internet to access your VPC, you can attach an Internet gateway to the VPC.

✅ Internet gateway is a connection between a Virtual Private Cloud (VPC) and the internet.
✅ To access private resources in a VPC , you can use a virtual private gateway.

✅ A virtual private gateway enables you to establish a virtual private network connection between your VPC and a private network. such as an op-premises data centre or internal corporate network. A virtual private gateway allow traffic into the VPC only if it is coming from an approved network.
✅ AWS Direct Connection: Is a service that enables you to establish a dedicated private connection between your data centre and virtual private connection.

✅ A subnet is a section of a VPC in which you can group resources based on security or operational needs. Subnets can be public or private.

✅ Public subnets contain resources that need to be accessible by the public, such as an online store’s website.

✅ Private subnets contain resources that should be accessible only through your private network, such as a database that contains customers’ personal information and order histories.

✅ A network access control list (ACL) is a virtual firewall that controls inbound and outbound traffic at the subnet level.

✅ Network ACLs perform stateless packet filtering. They remember nothing and check packets that cross the subnet border each way: inbound and outbound.

✅ A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.

✅ Security groups perform stateful packet filtering. They remember previous decisions made for incoming packets.