Lesson 14 / 26

VPC Basics

Your own isolated network inside AWS, with public and private subnets.

A private network in the cloud

A VPC (Virtual Private Cloud) is your own logically isolated network within AWS, with its own IP address range, where you place all your resources.

Public vs private subnets

A VPC is split into subnets. A public subnet has a route to the internet (for load balancers, bastion hosts). A private subnet has no direct route in — used for databases and internal servers.

A gated community

A VPC is a gated community. The public street (public subnet) lets visitors reach the reception (load balancer). The inner lanes (private subnets) are only reachable from inside — that's where the residents (databases) live.