This is not part of the course, but noted from my own experience Important INBOUND Rules Type Protocol Port Range Source Rule Note All Traffic ALL ALL 10.0.0.0/16 Allow Accept all communications from any resource on the VPC All ICMP ICMP ALL 0.0.0.0/0 Allow Ping SSH TCP 22 0.0.0.0/0 Allow SSH Access HTTP TCP 80 ..
Category : VPC
https://www.udemy.com/aws-certified-solutions-architect-associate/learn/v4/t/lecture/2801642?start=0 http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security.html Security Group Network ACL Operates at the instance level (first layer of defense) Operates at the subnet level (second layer of defense) Supports allow rules only Supports allow rules and deny rules Is stateful: Return traffic is automatically allowed, regardless of any rules Is stateless: Return traffic must be explicitly allowed by rules ..
https://www.udemy.com/aws-certified-solutions-architect-associate/learn/v4/t/lecture/2801640?start=0 NAT Instances An EC2 instance that acts as a gateway. An Instance that is used to provide Internet traffic to EC2 instances in private subnets (non-Internet accessible). Create an EC2 instance from the Community AMIs after searching for ‘NAT’ Pick the most recent one. The OS install is slightly smaller than what you would ..
https://www.udemy.com/aws-certified-solutions-architect-associate/learn/v4/t/lecture/2801686?start=0 Build your own VPC Create the VPC Networking > VPC > Your VPCs > Create VPC Name Tag CIDR = Classless Inter-Domain Routing It does NOT automatically create Subnets Internet Gateways It DOES automatically create Route Table Network ACL Security Group Create Subnets Subnets CANNOT span AZ! AWS reserves 3 IP addresses per subnet, ..
https://www.udemy.com/aws-certified-solutions-architect-associate/learn/v4/t/lecture/2050704?start=0 This section is essential regardless of the exam you’re taking. A VPC is a logical datacenter.’ VPCs do NOT span Regions, but can span AZ Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the Amazon Web Services (AWS) Cloud where you can launch AWS resources in a virtual ..
Recent Comments