AWS Certified Cloud Practitioner (CLF-C02)Cloud Technology and ServicesMedium
A company is migrating its on-premises virtual machines to AWS. They want to ensure that their EC2 instances are isolated at the network level and can communicate securely with each other using private IP addresses. They also need to control inbound and outbound traffic to these instances with stateful firewall rules. Which AWS networking component provides this functionality?
- AAWS Direct Connect
- BAmazon Route 53
- CElastic Load Balancer (ELB)
- DVirtual Private Cloud (VPC)
Show answer & explanationAnswer & explanation
Correct answer: D. Virtual Private Cloud (VPC)
A Virtual Private Cloud (VPC) allows you to provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define. It provides control over your virtual networking environment, including IP address ranges, subnets, route tables, and network gateways, and uses Security Groups (stateful) to control traffic to instances.
Why the other options are wrong
- A. AWS Direct Connect establishes a dedicated network connection from your premises to AWS, but it does not define the virtual network environment or provide instance-level firewall rules.
- B. Amazon Route 53 is a DNS web service and does not provide network isolation or stateful firewall rules for EC2 instances.
- C. An Elastic Load Balancer (ELB) distributes incoming application traffic across multiple targets, but it does not provide network isolation or stateful firewall rules for instances.
Amazon Virtual Private Cloud (VPC)
A logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define, with full control over network configuration.
- Enables private IP communication between instances.
- Uses Security Groups for stateful instance-level firewalls.
- Allows creation of subnets, route tables, and internet gateways.
Memory trick: VPC: Your Private Cloud network.