Skip to content

Amazon VPC

#10 · Level 1 · Core services · Networking basics

Amazon VPC (Virtual Private Cloud) is your own separate, secure network inside AWS. It lives inside one Region, and you choose its range of IP addresses (a CIDR block). A VPC is divided into smaller parts (Subnets), which sit in different Availability Zones. Route Tables, an Internet Gateway and NAT Gateways decide where traffic goes. Security Groups and Network ACLs control security. Many services, such as EC2 and RDS, run inside a VPC.

In a big city (AWS), you take a walled-off area of your own. You decide what goes inside, and who can enter and leave through which gate.

So your servers and databases don’t mix with other people’s networks, and nobody from outside can get in as they please.

Almost every AWS project starts with a VPC. A website’s servers and databases all live inside a VPC.

Azure Virtual Network (VNet)

Subnet · Security Group · Internet Gateway

For details and the latest information, see the official documentation: