AWS Security Cookbook

Network Security with VPC

VPC stands for Virtual Private Cloud. VPCs can be considered virtual data centers on the cloud. With Amazon VPC, we can create our own virtual private networks isolated from the rest of the AWS public cloud infrastructure. We have complete control of our virtual private network. We can create our own IP address ranges, public or private subnets, and also configure the route tables and network gateways as per our requirements. We can launch internet-facing instances for web servers into the public subnets and launch non-internet facing instances such as database servers into the private subnets. We can also make use of multiple security mechanisms, such as security groups and network access control lists (NACLs), ...