Networking and Content Delivery
CoreAmazon VPC
Security-group, private connectivity, allowlist, and managed/unmanaged access boundary.
Key points
- VPC defines subnets, routes, security groups, and private endpoint paths for data workloads.
- Network reachability is distinct from IAM, database grants, catalog permissions, and encryption authorization.
Best-known use cases
- Isolate processing clusters and databases in private subnets.
- Control pipeline traffic with routing, security groups, and private endpoints.
What candidates often confuse it with
- VPC controls network placement and paths; PrivateLink adds private access to supported services across those boundaries.
Key takeaway
Use VPC controls to isolate processing and data stores and permit only the required traffic paths.
Relevant exam tasks
- D1.1 — Task 1.1: Perform data ingestion
- 1.1.8 — Create allowlists for IP addresses to allow connections to data sources.
- D4.1 — Task 4.1: Apply authentication mechanisms
- 4.1.1 — Update VPC security groups.
- 4.1.5 — Apply IAM policies to roles, endpoints, and services (for example, S3 Access Points, AWS PrivateLink).