Understanding VPC Security
You can think of a VPC as your own private section of the AWS network. It allows you to create a virtual network infrastructure that you can segment into different networks. VPCs can be segmented for public-facing access, in which services have IP addresses that are reachable by the entire internet, and private access, in which the IP addresses are accessible only once you have entered the VPC network and a route has been provided.
Before you start reviewing the different aspects of VPC security, first look at some of the terms that will be used throughout this chapter in discussions on AWS networking:
- Subnets: A subnet defines a range of IP addresses in a VPC; there are both public and private subnets. Each subnet can only inhabit one Availability Zone (AZ) and cannot traverse multiple AZs or Regions.
- Security groups: Security groups act as virtual firewalls in Amazon VPC. You can have up to five security groups per EC2 instance, and security...
