VPC
Virtual Private Cloud (VPC)
- A service provided by cloud computing platforms like AWS
- A
secure, logically isolated
segment of the AWS cloud where we can deploy and manage resources, exercising complete control over networking, security, and connectivity within a virtualized network environment. - We can define IPv4 and IPv6 address ranges, create subnets (private and public), configure route table, etc.
- A logically isolated segment of the AWS cloud within a specific region
Region
- Designed to allow users to deploy applications in geographically diverse locations, improving the latency and performance of applications by serving users from the closest region. It also helps in disaster recovery and compliance with regional data laws.
- Examples: Some AWS Regions include
us-east-1
(Northern Virginia),eu-west-1
(Ireland), andap-southeast-1
(Singapore).
Availability Zone
- Used to ensure high availability and fault tolerance for applications. By distributing resources across multiple AZs within a region, you can protect your application from failures that affect a single data center.
- You can think of a Data Center. Composed of one or more Data Center
- Examples: In the
us-east-1
region, you might find AZs such asus-east-1a
,us-east-1b
, andus-east-1c
.
Subnets
- A key concept in Amazon Web Services (AWS) networking that allows you to partition your Virtual Private Cloud (VPC) into smaller, manageable segments.
- Subnets help manage resources in a VPC more efficiently by isolating and securing different parts of your network. They also allow you to apply different routing and security policies to different parts of your network.
- Can be Private or Public
- Attached in an Availability Zone
Private Services
- Include resources like databases and internal application servers that are placed in private subnets.
- Examples: Amazon RDS (Relational Database Service), Amazon EC2 Instances, Amazon Redshift (Data warehouses)
Public Services
- Include resources like web servers, load balancers, and content delivery networks that are intended to be accessed over the internet.
- Examples: Amazon EC2 Instances, Elastic Load Balancers, S3, CloudFront, Route 53, DynamoDB