Virtual Private Cloud, or VPC, is technically not a part of EC2. However, this is usually the first step when getting started with EC2. VPC creates a virtual network which logically isolates our resources. This improves security and management since, logically, subnet and gateway are dedicated for our resources only. A common usage of VPC is to isolate public-facing services (like load balancers or instances running public services) and servers storing data (like databases) which do not require direct access from the wider internet.
Technically, a VPC has several moving parts, as depicted in the preceding image. Even a simple architecture would consist of the following components:
- The VPC itself, where we will allocate a high-level Classless InterDomain Routing (CIDR) block and choose a region.
- A public subnet, which will use a chunk of CIDR from...
