Networking and Content Delivery
Amazon VPC
A logically isolated virtual network in AWS containing IP address ranges, subnets, route controls, gateways, and network security controls.
Key points
- Subnets divide a VPC address range and are associated with one Availability Zone.
- Route tables direct traffic; gateways provide specific connectivity paths.
- Security groups are stateful resource-level controls, while network ACLs are stateless subnet-level controls.
Best-known use cases
- Create an isolated network boundary for AWS resources.
- Separate resources into subnets and control traffic at resource and subnet layers.
What candidates often confuse it with
- Security groups are stateful and attach to supported resources; network ACLs are stateless and apply at subnet boundaries.
- VPC is the network; Route 53 is DNS and CloudFront is content delivery.
Key takeaway
Think VPC for the virtual network and its subnets, routes, gateways, security groups, and network ACLs.
Related services
- Amazon Route 53
- AWS VPN and AWS Direct Connect
Relevant exam tasks
- D3.5 — Identify AWS network services.