6.1 VPC Overview
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
Already have an account? Sign In »
3 hours 27 minutes
In this video,
we will define
what is a virtual private clout or V p. C.
And we will introduce the components of our default vpc
Hello and welcome back to the course.
In our last video, we wrote a bash scrip toe automate our easy to security updates
and launch are easy to Web server.
In this video, we will introduce one of the most important concepts of the entire course
the Amazon Virtual Private Cloud
or VPC for short.
I will be going over a lot of new material.
For some, it may be the first time learning about networking.
Please don't worry. If you have absolutely no idea about what some of these terms mean,
they will begin to make sense as we progress through this module.
So what is the VPC
Amazon virtual private cloud
enables us to launch A W s resource is
into a virtual network that we define.
The virtual network resembles a traditional data center network.
It is logically segment it from other virtual networks. Within AWS,
the V P. C is the network portion of the C two instances that we launched our previous lessons.
In fact, we have been working within our default. BBC Each time that we've launched in the sea, to instance,
each AWS region is supplied with a default. Vpc
a picture's worth 1000 words. So
let's take a look at the components that make up the default. VPC.
Now we will be getting into some networking terminology as well.
I am a network guy by trade,
but there are plenty of sites online that help you to visualize some of the network submitting that will be discussing.
Here are a couple of links that I recommend.
These sites will help to reinforce some of the classless inter domain routing or cider concepts.
So let's log into the AWS Consul and type VPC into the filter.
Then let's select our V P C
within our default. VPC
A W s creates a slash 16
i p v four cider block.
This provides up to 65,000
536 private I pee before addresses.
It WS also creates a size slash 20 default sudden it in each availability zone.
This provides up to 4096 addresses percent in it
A W s reserves. Some of the host addresses for internal use
on Lee won seven. It per availability zone is permitted.
If you click on a sub net,
then you'll be able to see that the each reside within their own unique availability. Zone
A W S creates an Internet gateway and attaches it to our default. VPC.
The Internet gateway serves two purposes.
It connects components within our V P C to the Internet,
and it also provides network address. Translation or net, for instance, is that we have assigned a public I pee before addressed to
a W S creates a default security group and associates it with our default. Vpc.
If you recall from previous lessons, a security group is essentially the firewall for V. P. C
AWS creates a default network access control list or a C l
A network access control. This is an optional layer of security for our VPC that perform similarly to a firewall.
However, we could use it for controlling traffic in and out of one of more sub nets.
Finally, A W S Associates, the default D A C P options set for end of US account within our default VPC.
The dynamic holds configuration pro goal
provides a standard
for passing configuration information to host on a T C P i p network.
So the options field of a D. A. C P message contains the configuration parameters.
We can configure the D H CP option sets to pass along configuration information toe are instances that are relevant to our V p. C.
So those are the components that AWS created for us when we signed up for our free tier accounts.
In the next few lessons, we will build out our own VPC step by step
so that we can really get to understand what role each component plays within our V p c.
What is an Amazon virtual private cloud?
Amazon Virtual Private cloud
enables us to launch A W s resource is into a virtual network that we define.
This virtual network resembles a traditional data center network.
What are the components that AWS creates for us as part of our default vpc
As part of our default, VPC
AWS creates for us a slash 16 i p v for cider block
slash 20 sub nets,
an Internet gateway,
a security group
and a C L
and D h e P option said
how many sub nets are permitted per availability zone.
Onley one sub net is permitted per availability zone.
In this video,
we defined what is a virtual private cloud or V p C,
and we introduced the components of our default vpc.