AWS VPC and Additional Networking Services for Cloud/DevOps Engineers

AWS VPC and Additional Networking Services for Cloud/DevOps Engineers

Learning path for the AWS Cloud Practitioner exam

📝Introduction

In this post, we will cover the main Technologies from AWS Virtual Private Cloud(VPC) in Additional Networking Services.

📝AWS Virtual Private Cloud(VPC)

VPC -> It is a foundational service that allows you to create a secure private network in the AWS cloud where you launch your resources.

  • Private virtual network

  • Launch resources inside the VPC(i.e. EC2 instances)

  • Isolate and protect resources

  • VPC spans AZs in a Region

  • Subnet -> Allows you to split the network inside the VPC. The exact where you launch your EC2 instance.

  • Network ACL (NACL) -> Access control lists(ACLs) ensure the proper traffic is allowed into the subnet.

  • Route Table and Router -> Defines where network traffic is routed.

  • Internet Gateway(GW) -> Allows public traffic to the internet from a VPC.

  • VPC peering -> Allows to connect 2 VPCs together.

    • Peering facilitates the transfer of data in a secure manner.

📝Additional Networking Services

  • Amazon Route 53 -> It is a DNS service that routes users to applications.

    • Domain name registration

    • Performs Health Checks on AWS resources

    • Supports hybrid cloud architectures

  • AWS Direct Connect -> It is a dedicated physical network connection from your on-premises data centre to AWS.

    • Dedicated physical network connection between on-premises DC and AWS

    • Data flow over a private network

    • Supports hybrid environment

    • AWS Direct Connect in the Real World Scenarios:

      • Transfer large datasets to AWS

      • Transfer internal data directly to AWS, bypassing your internet service provider (Business critical data)

      • Build hybrid environment

  • AWS VPN -> Site-to-Site VPN creates a secure connection between your internal networks and AWS VPCs.

    • Similar to Direct Connect, but data flows over the public internet

    • Connects your on-premises DC to AWS

    • Data is automatically encrypted

    • Supports hybrid environment

    • Site-to-Site VPN in the Real World Scenarios:

      • Makes moving applications to the cloud easier

  • API Gateway -> It allows you to build and manage APIs.

    • Share data between systems

    • Integrate with services(i.e. Lambda)

    • API Gateway in the Real World Scenario:

Thank you for reading. I hope you were able to understand and learn something helpful from my blog.

Please follow me on Hashnode and on LinkedIn franciscojblsouza