ADVERTISEMENT
Google AdSense Slot (headerLeaderboard)

Set your Publisher ID in src/config/ads.ts to display live ads.

AWS Cloud Computing Tutorial• 7 min read

VPC: Virtual Private Cloud & Networking

Public vs Private subnets, Internet Gateways, NAT Gateways, and CIDR blocks

Amazon VPC lets you provision an isolated private virtual network in the AWS cloud where you launch AWS resources with customized IP address ranges, subnets, and routing tables.

Public vs Private Subnet Architecture

CIDR Block: IP address allocation (e.g. 10.0.0.0/16 provides 65,536 private IP addresses).

Public Subnet: Routed to an Internet Gateway (IGW), allowing resources (like web servers or load balancers) to have public IPs and receive direct traffic from the internet.

Private Subnet: Isolated from the public internet (ideal for backend databases and caching layers). Outbound internet access (for security patches) is routed through a NAT Gateway in the public subnet.

Production VPC Multi-Tier Layout
VPC CIDR: 10.0.0.0/16
├── Public Subnet (10.0.1.0/24)  -> Internet Gateway (Web Load Balancers)
├── Private Subnet 1 (10.0.2.0/24) -> NAT Gateway (Backend Microservices)
└── Private Subnet 2 (10.0.3.0/24) -> No Internet (RDS Aurora Database)
Databases are quarantined in private subnets with zero direct inbound internet routes.
ADVERTISEMENT
Google AdSense Slot (inContentBanner)

Set your Publisher ID in src/config/ads.ts to display live ads.

Test Yourself With Exercise

+15 XP

What network device enables EC2 instances in a private subnet to connect outbound to the internet for security updates while blocking inbound connections from the internet?