Networking and Content Delivery
CoreAmazon VPC
Isolated virtual networks with subnets, routes, gateways, endpoints, security groups, and network ACLs.
Key points
- Subnet routes and addressing establish reachability; security groups and NACLs filter traffic at different boundaries.
- Design independent AZ paths for production tiers, including egress and endpoints where required.
- VPC endpoints privately reach supported services; NAT supplies controlled outbound access but is not private service connectivity.
Best-known use cases
- Build segmented public, application, and data tiers.
- Connect workloads privately to AWS services, VPCs, and on-premises networks.
What candidates often confuse it with
- Security groups are stateful resource controls; NACLs are stateless subnet controls.
- NAT provides outbound access; PrivateLink/endpoints provide private supported-service access.
Key takeaway
Choose VPC topology by required flows, trust boundaries, placement, and failure isolation.
Related services
- AWS PrivateLink
- AWS Transit Gateway
- AWS Direct Connect
- AWS Site-to-Site VPN
Relevant exam tasks
- D1.2
- D2.2
- D3.4
- D4.4