Networking and Content Delivery
Amazon VPC
A logically isolated virtual network in AWS containing IP address ranges, subnets, route controls, gateways, and network security controls.
Key points
- Subnets divide a VPC address range and are associated with one Availability Zone.
- Route tables direct traffic; gateways provide specific connectivity paths.
- Security groups are stateful resource-level controls, while network ACLs are stateless subnet-level controls.
Best-known use cases
- Create an isolated network boundary for AWS resources.
- Separate resources into subnets and control traffic at resource and subnet layers.
What candidates often confuse it with
- Security groups are stateful and attach to supported resources; network ACLs are stateless and apply at subnet boundaries.
- VPC is the network; Route 53 is DNS and CloudFront is content delivery.
Key Cloud Practitioner takeaway
Think VPC for the virtual network and its subnets, routes, gateways, security groups, and network ACLs.
Related services
- Amazon Route 53
- AWS VPN and AWS Direct Connect
Relevant exam tasks
- D3.5