AWS VPC in nutshell. Overview of AWS VPC.

1. AWS Virtual Private
Cloud
Launch AWS resources
in a virtual network

2. Contents
Introduction
Private and Public Subnets
Connectivity
Security

3. Introduction
Launch AWS
resources in a
virtual network
Logically isolated
virtual network in
the AWS cloud
Define a VPC’s IP
address space
from ranges you
select
Enhanced security
options

4. Subnets
Segment of a VPC’s IP address range
10.0.0.0 - 10.255.255.255 (10/8 prefix)
172.16.0.0 - 172.31.255.255 (172.16/12 prefix)
192.168.0.0 - 192.168.255.255 (192.168/16 prefix)
/16 - /28
5 IPs reserved by AWS

5. • Public Subnet
• Private Subnet
• Route Table
• 0.0.0.0/0 decides internet
• Internet Gateway provides
connectivity
• ACL can be used to secure
Subnet
• Security Group can be used to
secure EC2
• NAT Instance and NAT Gateway
can provide internet to Private
Subs
• Public EC2 should have public IP
• Private EC2 does not need public
IP
• NAT Gateway has Elastic IP

6. • VPC Endpoint Network
• Interface Endpoints
• Gateway Endpoints
• Private Link

7. • Virtual Private Gateway
• VPN
• Customer Gateway

8. • Security Group

9. Connectivity
Internet Gateway
NAT Gateway
NAT Instance
VPC Endpoints
AWS PrivateLink
VPC Site to Site Connectivity

10. Security
Secure Amazon EC2 instances running
ACL
Security Groups
Stateful and Stateless filtering
VPC Flow Log (Capture IP Traffic)

11. Limits
VPCs per Region : 5 (Can be increased)
Subnets per VPC : 200
IPv4 CIDR blocks per VPC : 5
(1p 4s)
IPv6 : 1 (Can’t increase)

12. Limits
(Gateway)
Customer gateways per Region: 50
Egress-only internet gateways per Region : 5
Internet gateways per Region : 5
NAT gateways per Availability Zone : 5
Virtual private gateways per Region : 5 (1 per VPC)

13. Limits
(Gateway)
Network ACLs
per VPC: 200
Rules per
network ACL :
20 -40

14. References
• https://aws.amazon.com/vpc/