Networking in a VPC
Networking within an AWS VPC is the foundational infrastructure that enables the secure and efficient operation of cloud resources. It provides a controlled environment where users can create isolated networks (known as VPCs) and define the rules governing communication between these resources.
Within a VPC, subnets are established. Subnets are like distinct neighborhoods within your VPC, allowing resource organization and segregation. You can control if outside users are able to access your resources by using public and private subnets.
To enable communication between resources in the VPC and the internet, an IGW is attached to the VPC. It serves as the entry and exit point for data, facilitating the secure flow of traffic.
As with public subnets in AWS, the EC2 instances and other services that reside in your private subnets can still require limited connectivity to the internet. This topic is dealt with next.