AWS 네트워킹의 시작인 Amazon VPC부터 글로벌 하이브리드 네트워크를 위한 AWS Direct Connect SiteLink, CloudWAN과 같은 원격 네트워크를 통합하기 위한 서비스를 소개합니다. 또한, 인스턴스, 컨테이너, 서버리스 등 다양한 환경에서도 일관된 방식으로 컴퓨팅 서비스를 연결할 수 있는 새로운 애플리케이션 연결 방법들과 제로 터치 기반의 애플리케이션에 접근 방법들에 대해서도 알아봅니다.

1. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
S E O U L | M A Y 4 , 2 0 2 3

2. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
,
AWS
Network Specialist Solutions Architect
AWS
Solutions Architect
AWS

3. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
1. VPC
2.
3. AWS
4.
Agenda

4. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
1. VPC

5. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
DMZ
LB
( ) (WEB/WAS)
DB
( )
( )
/
LB
( ) (WEB/WAS)
DB
• /
• , VPN
• , IP (ACL)
• (WAF), DDoS
/
• L4/L7 (LB)
•
• (DR)

6. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.

7. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon Virtual Private Cloud (Amazon VPC)
“ AWS ,
AWS ”
IP

8. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS
ELB
( ) (WEB/WAS)
DB
( )
/
ELB
( ) (WEB/WAS)
DB
VPC
AWS
VPN
• VPC ,
• , VPN
• -
• IP (ACL) - NACL
• WAF, DDoS
/
•
•

9. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VPC
A
AWS
, ,
,
3
VPC
B

10. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
A
VPC
VPC
B
NAT

11. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VPC
VPC
ACL
• (ENI)
•
• (Stateful)
• Allow
•
• (Stateless)
• Allow, Deny

12. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon S3
Amazon
DynamoDB
VPC
Amazon Kinesis
Data Streams
AWS KMS
AWS Certificate
Manager
Amazon
API Gateway
VPC
ENI
AWS PrivateLink
•
• Amazon S3, Amazon
DynamoDB
• ENI AWS PrivateLink
• , SaaS ,
AWS DirectConnect

13. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VPC VPC
•
•
•
• Full Mesh
VPC
VPC VPC

14. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VPC VPC
•
•
•
• Full Mesh
VPC
VPC VPC
VPC
Full Mesh n(n-1)/2

15. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Transit Gateway
AWS Transit Gateway
•
•
•
•
AWS
VPC VPC
VPC
AWS Transit
Gateway

16. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Transit Gateway
•
•
•
•
•
AWS Transit Gateway
AWS
A
VPC
AWS Transit
Gateway
VPC
B
VPC VPC
Transit Gateway Peering

17. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS
AWS Direct Connect
AWS
AWS Transit
Gateway
DX
Gateway
Direct Connect
Pub VIF
Transit VIF
Pri VIF
VPC
VPC
VPC
VPC
AWS
Cage
Cage
• :
1/10/100Gbps
• :
50Mbps – 10Gbps
• Private VIF
• Transit VIF
• Public VIF

18. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Site to Site VPN
AWS
VPC
IPSEC
IPSEC
VPN
EC2
• -AWS
IPSec
• 2
Active-Standby
• Global Accelerator
AWS Site to Site VPN

19. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Client VPN
AWS
VPC
AWS
Client VPN
ENI
EC2
• AWS
•
•
VPN
AWS Client VPN

20. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
VPC
VPC
A B
NAT NAT
ENI
Transit Gateway
VPC
Amazon SQS
Amazon S3
VPC
AWS Client VPN
AWS S2S VPN
AWS
Transit Gateway
AWS
Direct Connect

21. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
2.

22. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
, MPLS, /VPN, SD-WAN, …
✓ , , ,
✓
✓
✓ ( / )
/
/

23. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS
A
VPC VPC
B
VPC VPC
C
VPC VPC
D
VPC VPC
AWS ?
/
/

24. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
400
13
AWS
Direct Connect
115 Direct Connect
31 , 99
https://aws.amazon.com/ko/about-aws/global-infrastructure/

25. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Direct Connect
, VPC
AWS
VPC VPC VPC VPC VPC VPC VPC VPC
VPC
Direct Connect
LA
AWS Direct Connect

26. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Direct Connect
AWS DIRECT CONNECT
AWS
VPC VPC VPC VPC VPC VPC VPC VPC
AWS Direct Connect
LA

27. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Direct Connect SiteLink
AWS DIRECT CONNECT
AWS
VPC VPC VPC VPC VPC VPC VPC VPC
AWS Direct Connect SiteLink
LA

28. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Cloud WAN
AWS
?
VPC VPC VPC VPC VPC VPC VPC VPC
LA
VPN
DX SD-WAN VPN

29. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Cloud WAN
AWS
VPC VPC VPC VPC VPC VPC VPC VPC
AWS Cloud WAN
, ,
LA
Core Network Edge
VPN
DX SD-WAN VPN

30. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Cloud WAN
AWS
VPC VPC VPC VPC VPC VPC VPC VPC
AWS Cloud WAN
AWS Cloud WAN ?
LA
Core Network Edge
VPN
DX SD-WAN VPN

31. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS
AWS Accelerated Site-to-Site VPN
AWS GLOBAL ACCELERATOR AWS
ISP
ISP
ISP
ISP ISP ISP ISP
ISP
Transit
Gateway
CNE
VPC
AWS Site-to-Site VPN
ISP
AWS ISP
, ,

32. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
ISP
AWS Accelerated Site-to-Site VPN
AWS GLOBAL ACCELERATOR AWS
Transit
Gateway
CNE
VPC
AWS Accelerated Site-to-Site VPN
AWS
ISP
AWS
AWS
AWS
@
, ,

33. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Cloud WAN + Accelerated S2S VPN
AWS
AWS
VPC VPC VPC VPC VPC VPC VPC VPC
AWS Cloud WAN
LA
Core Network Edge
AWS
VPN
DX SD-WAN VPN

34. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
A W S
AWS Direct
Connect
AWS Cloud WAN
AWS Client VPN
AWS Site-to-Site
VPN /
AWS Accelerated
Site-to-Site VPN
AWS Direct
Connect SiteLink
/
/ /
AWS Direct
Connect
AWS

35. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
3. AWS

36. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS
AWS – AWS VERIFIED ACCESS AMAZON VPC LATTICE
Amazo
n VPC
AWS
Transit
Gateway
Amazon
CloudFront
Amazon
Route 53
AWS
PrivateLink
AWS
Direct
Connect
AWS Global
Accelerator
AWS
Site-to-
Site
VPN
Amazon
VPC Lattice
AWS
Cloud WAN
AWS
App
Mesh
Elastic
Load
Balancing
AWS
Network
Firewall
AWS WAF AWS
Shield
AWS
Verified
Access
AWS
2022 12 AWS re:Invent

37. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Verified Access
• ( / )
•
• ( )
APP
/
VPC
AWS
(ELB)
(EC2)
VPN

38. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS Verified Access
VPC
AWS
(ELB)
(EC2)
Amazon
Verified
Access
▪ /
▪ App
▪
✓ ( / )
✓
✓ VPN
✓ ( )
Amazon Verified Access
▪
▪
▪ SIEM /
/
• ( / )
•
• ( )
APP
Amazon Verified Access

39. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon VPC Lattice
VPC A
VPC C
VPC B
VPC D
Transit Gateway
VPC
peering ?
✓ VPC,
✓
✓ /

40. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
Amazon VPC Lattice
✓ AWS
✓
✓
✓ ( )
Amazon VPC Lattice
✓ VPC,
✓
✓ /

41. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
4.

42. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
AWS
AWS
AWS
AWS
AWS
AWS
AWS

43. © 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
© 2023, Amazon Web Services, Inc. or its affiliates. All rights reserved.
.