Introduction to VPC Fundamentals
As discussed in Chapter 1, Introduction to AWS Accounts and Global Infrastructure, an AWS account gives you secure isolated access to AWS services. Unless you grant access to someone by defining the appropriate permissions, your AWS account and the resources contained within are not accessible to anyone else.
Furthermore, you can separate different application workloads and projects within an AWS account. A Virtual Private Cloud (VPC) is an isolated network environment that you create comprising routing and security protocols to help you separate your workloads. You can have multiple VPCs in your AWS account as required. You can specify an IP address range for the VPC, add sub-networks (subnets) and gateways, and associate security groups and network access control lists (NACLs).
Subnets within a VPC allow you to separate further workload components such as frontend websites from backend databases. This adds an additional layer of security since...
