Virtual Private Cloud networking and Route 53 networking

The Virtual Private Cloud (VPC) service from AWS allows you to create a virtual network in the cloud. It allows your compute and database instances to either allow internet connectivity or segment it off from the internet. Security can be accomplished through either stateful or stateless virtual firewall rules, which provide the amount of network connectivity that you see fit:

Figure 2.8 – Network traffic and security in AWS

The VPC service comprises multiple components that allow you to route and secure traffic from your AWS services and, optionally, the internet and/or your on-premises network.

VPC

Although the solution architect (or possibly the network architect) will often determine the CIDR address range that's used for the VPC, many times, it falls on the DevOps engineer to implement the VPC with Infrastructure as Code (IaC).

There are quite a few components that can...