|
VPC
|
Private network within AWS
|
|
Subnet
|
Private/Public sub network within VPC
|
|
Network Firewall
|
Security of VPC
|
|
Network Access Control List
|
Security of Subnet (Stateless. Allow + Deny rules)
|
|
Security Groups
|
Security of EC2 (Stateful. Allow rules only)
|
|
Shield
|
Security of Application (Layer 3/4)
|
|
Web Application Firewall
|
Security of Application (Layer 7)
|
|
Internet Gateway
|
Connect VPC to Internet
|
|
NAT Gateway
|
Connect Private Subnet to Internet (AWS Managed)
|
|
NAT Instance
|
Connect Private Subnet to Internet (Self Managed)
|
|
VPC Peering
|
Connect VPC to VPC privately
|
|
|
Transit Gateway
|
Connect multiple VPCs
|
|
|
PrivateLink
|
Connect VPC to AWS services privately
|
|
|
VPC Endpoint Gateway
|
S3, DynamoDB
|
|
|
VPC Endpoint Interface
|
Rest of AWS services
|
|
|
Direct Connect
|
Connect on-premises to VPC privately
|
||
|
VPN
|
|||
|
Site-to-Site VPN
|
Connect on-premises to VPC publicly
|
||
|
Customer Gateway
|
Within on-premises
|
||
|
Virtual Private Gateway
|
Within VPC
|
||
|
Client VPN
|
Connect users to VPC publicly
|
||
No comments yet.
Cheatography n. The art of mapping complex subjects into clear, instantly navigable reference guides.
