Learn Cloud with Saleh

Components of VPC (Virtual Private Cloud):

Subnets:
● The subnet is a core component of the VPC.
● Resources will reside inside the Subnet only.
● Subnets are the logical division of the IP Address.
● One Subnet should not overlap another subnet.
● A subnet can be private or public.
● Resources in Public Subnet will have internet access.
● Resources in the Private Subnet will not have internet access.
● If private subnet resources want internet accessibility then we will
need a NAT gateway or NAT instance in a public subnet.

Route Tables:
● Route tables will decide where the network traffic will be directed.
● One Subnet can connect to one route table at a time.
● But one Route table can connect to multiple subnets.
● If the route table is connected to the Internet Gateway and that route
table is associated with the subnet, then that subnet will be
considered as a Public Subnet.
● The private subnet is not associated with the route table which is
connected to the Internet gateway.

NAT Devices:
● NAT stands for Network Address Translation.
● It allows resources in the Private subnet to connect to the internet if
required.

NAT Instance:
● It is an EC2 Instance.
● It will be deployed in the Public Subnet.
● NAT Instance allows you to initiate IPv4 Outbound traffic to the
internet.
● It will not allow the instance to receive inbound traffic from the
internet.

NAT Gateway:
● Nat Gateway is Managed by AWS.
● NAT will be using the elastic IP address.
● You will be charged for NAT gateway on a per-hour basis and data
processing rates.
● NAT is not for IPv6 traffic.
● NAT gateway allows you to initiate IPv4 Outbound traffic to the
internet.
● It will not allow the instance to receive inbound traffic from the
internet.


#AWS #cloudcomputing #awssolutionsarchitect #VPC

3 years ago | [YT] | 1

Learn Cloud with Saleh

A company currently storing a set of documents in the AWS Simple Storage Service, is worried about the potential loss if these documents are ever deleted. Which of the following can be used to ensure protection from loss of the underlying documents in S3?

3 years ago | [YT] | 0

Learn Cloud with Saleh

#AmazonS3

What is Amazon S3?

S3 stands for Simple Storage Service. Amazon S3 is object storage that allows us to store any kind of data in the bucket.
It provides availability in multiple AZs, durability, security, and performance at a very low cost. Any type of customer can use it to store and protect any amount of data for use cases, like static and dynamic websites, data analytics, and backup.

Basics of S3:
● It is object-based storage.
● Files are stored in Buckets.
● The bucket is a kind of folder.
● Folders can be from 0 to 5 TB.
● S3 bucket names must be unique globally.
● When you upload a file in S3, you will receive an HTTP 200 code if the
upload was successful.
● S3 offers Strong consistency for PUTs of new objects, overwrites or delete of
current object, and List operations.
● By Default, all the Objects in the bucket are private.


#aws #cloudcomputing #Cloud_Solution_Architect #aws_s3

3 years ago | [YT] | 1

Learn Cloud with Saleh

#AWS_VPC

What is AWS VPC?
Amazon Virtual Private Cloud (VPC) is a service that allows users to create a virtual dedicated network for resources.


Security Groups:


Default Security Groups:-
Inbound rule - Allows all inbound traffic
Outbound rule - Allows all outbound traffic
Custom Security Groups:- (by default)
Inbound rule - Allows no inbound traffic
Outbound rule - Allows all outbound traffic

Network ACLs (access control list):


Default Network ACL:-
Inbound rule - Allows all inbound traffic
Outbound rule - Allows all outbound traffic
Custom Network ACL:- (by default)
Inbound rule - Denies all inbound traffic
Outbound rule - Denies all outbound traffic

3 years ago | [YT] | 1