From the course: AWS Administration: Security Fundamentals

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Network security overview

Network security overview

- [Instructor] When we're looking at the protection of our hosts, i.e. the EC2 instances on the network, we're now at a lower level where we're now looking at where the hosts are quote-unquote hosted, and they're hosted in a network, i.e., a virtual private cloud, a VPC. All compute resources are hosted on subnets. The subnets are created in a virtual private cloud. It's up to you how many availability zones you decide to use. In this example, we can see there are resources in public subnets and private subnets. We don't really need to have our web servers hosted in public subnets. We can have everything within the private subnet arena, but this is just giving you an example of what you could do. Private subnets do not have direct internet access, so you might have a use case. You might say, "Mark, I'm going to use public subnets. That's what I want to do." I'd recommend looking at the fact that everything could be…

Contents