Public and Private Subnet Design
Separate internet-facing and internal resources within a VPC.
The VPC Foundation
A Virtual Private Cloud (VPC) is your logically isolated network in AWS. Within it you carve out subnets, ranges of IP addresses tied to a single Availability Zone. How you divide a VPC into subnets is the first and most important security decision, because it determines what can reach what.
Public Versus Private
A public subnet has a route to an internet gateway, so resources in it can be reached from and reach the internet. A private subnet has no direct internet route. The distinction is defined entirely by the route table, not by any property of the subnet itself.
All lessons in this course
- Public and Private Subnet Design
- Internet, NAT, and Egress Gateways
- Route Tables as Security Controls
- Securing VPC Peering and Transit Gateway