AWS Security Cookbook

Getting ready

To complete the steps within this recipe, we need to do the following:

1. Create a VPC by following the Creating a VPC in AWS recipe. Create some subnets by following the Creating subnets in a VPC recipe.
2. Subnets should be associated with the default NACL. Otherwise, we should define proper inbound and outbound rules so that we can log in to the private EC2 instance through the public EC2 instance.
3. We should have no internet access for the private subnet. Verify this by running aws s3 ls --region us-east-1 from our private subnet. Our requests should fail with a timeout. If a NAT gateway or a NAT instance has been configured, remove its route from the main route table.
4. We need an S3 bucket in any region. I will be using us-east-1 ...