Networking Flashcards
(17 cards)
Amazon Virtual Private Cloud (Amazon VPC)
A networking service that you can use to establish boundaries around your AWS resources
Subnet
A section of a VPC that can contain resources such as Amazon EC2 instances
VPC
Virtual private cloud
IGW
Internet gateway
AWS Direct Connect
A service that lets you to establish a dedicated private connection between your data center and a VPC
Packet
A unit of data sent over the internet or a network
Network access control list (ACL)
The VPC component that checks packet permissions for subnets
a virtual firewall that controls inbound and outbound traffic at the subnet level
Security Groups
Perform stateful packet filtering. They remember previous decisions made for incoming packets. All packets are allowed out.
Network ACLs
Perform stateless packet filtering. They remember nothing and check packets that cross the subnet border each way: inbound and outbound.
AWS account’s default network access control list
It is stateless and allows all inbound and outbound traffic.
Route 53
AWS Domain Name System
Domain Name System (DNS)
The phone book of the internet. DNS resolution is the process of translating a domain name to an IP address.
Your company has an application that uses Amazon EC2 instances to run the customer-facing website and Amazon RDS database instances to store customers’ personal information. How should the developer configure the VPC according to best practices?
Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet.
Can be used to establish a private dedicated connection between your company’s data center and AWS
AWS Direct Connect
Security groups
They are stateful and deny all inbound traffic by default.
Used to connect a VPC to the internet
Internet gateway
Service is used to manage the DNS records for domain names
Amazon Route 53