NAT Gateway
Overview
A managed network service that enables instances in a private subnet of a Virtual Private Cloud (VPC) to connect to the internet while preventing unsolicited inbound traffic from reaching those instances. This is crucial for maintaining security and enabling outbound internet access from private networks.
Key Features
- Outbound Internet Access
- Managed Service
- Security
- Integration with VPC
Use Cases
- Software Updates
- Private instances may need to download updates or patches from the internet. A NAT Gateway allows these instances to access update servers while keeping their private IP addresses hidden.
- Accessing External APIs
- Applications running in private subnets might need to communicate with external APIs or services. NAT Gateway facilitates this communication securely.
- Maintaining Security
- By ensuring that private instances do not have public IP addresses and can only initiate outbound traffic, NAT Gateway helps to minimize exposure to potential attacks.
Analogy
NAT Gateway is like a receptionist in a secure office building. Employees (instances) who work in the office (private subnet) can send and receive information (internet access) through the receptionist (NAT Gateway). The receptionist handles all outgoing and incoming communication, ensuring that no unauthorized visitors (unsolicited inbound traffic) can enter the building.
In-Action
1 - Creating a NAT Gateway
Take Note:
- Attach the NAT Gateway to Public Subnet
- Allocate an Elastic IP
2 - Attaching NAT Gateway to Private Route Table
