Networking and Content Delivery
Amazon VPC
Amazon VPC provides isolated virtual networking for AWS resources with subnets, routes, security groups, network ACLs, and endpoints. It defines the trust boundaries and egress paths around custom GenAI compute and data stores.
Key points
- Security groups are stateful while network ACLs are stateless
- Public or private subnet behavior follows routing, not its name
- VPC endpoints privately reach supported services without a NAT gateway
When to use it
- Isolate an inference service and vector database in private subnets
- Restrict agent-tool egress to approved destinations
Exam tips
- Use VPC controls for network reachability and IAM for API authorization
- Design DNS and endpoints together; an isolated subnet can still fail if the required service endpoint is absent