Episode 11: VPC Architecture Deep Dive - Subnets, NAT Gateway & Security Groups vs NACLs | SAA-C03
Notes de l’épisode
🎁 Free SAA-C03 cheat sheet for this series - link at the bottom.
Complete VPC guide! Subnets, routing, NAT Gateway & Security Groups vs NACLs explained in under 40 mins.
🏗️ VPC FUNDAMENTALSCIDR: 10.0.0.0/16 = 65,536 IPs. Cannot change after creation!AWS RESERVES 5 IPs: .0 (network), .1 (router), .2 (DNS), .3 (reserved), .255 (broadcast)Example: /24 = 256 addresses, only 251 usable
📊 SUBNETSONE SUBNET = ONE AZ!PUBLIC: Route to IGW (web servers, load balancers)PRIVATE: No IGW route (databases, app servers)
🌍 INTERNET GATEWAYBidirectional access. One per VPC. FREE. Need: route + public IP + SG + NACL.
🔄 NAT GATEWAYOutbound-only for private instances. In PUBLIC subnet. One per AZ. Cost: $0.045/hr + $0.045/GB.
🛣️ ROUTE TABLESPUBLIC: 0.0.0.0/0 → IGWPRIVATE: 0.0.0.0/0 → NAT
🔒 SECURITY GROUPS vs NACLs (CRITICAL!)SECURITY GROUPS: STATEFUL, instance-level, ALLOW onlyNACLs: STATELESS, subnet-level, ALLOW/DENY
Stateful = return traffic auto-allowedStateless = must allow both directions!
🔗 VPC PEERINGConnect VPCs. NOT TRANSITIVE! A↔B↔C ≠ A↔C
🔌 ENDPOINTSGateway (S3/DynamoDB): FREEInterface (other services): Paid
⚠️ 12 TRAPS
- SG stateful vs NACL stateless
- Peering not transitive
- Subnets = one AZ
- NAT in public subnet
- 5 IPs reservedAnd 7 more!
⏱️ TIMESTAMPS00:00 Introduction | 01:00 VPC Fundamentals | 04:00 Subnets | 08:00 IGW | 10:00 NAT | 13:00 Routes | 16:00 SG vs NACL | 22:00 Peering | 25:00 Endpoints | 31:00 Traps
━━━━━━━━━━━━━━━━━━━━
📚 FREE STUDY HELP FOR SAA-C03
━━━━━━━━━━━━━━━━━━━━
✅ Free cheat sheet pack - one page per exam domain, incl. VPC, Route 53, CloudFront & Direct Connect on one page. No catch.
👉 https://payhip.com/b/Zv5hd
🎯 Learned the concepts? Now test yourself.
104 exam-style scenario questions that explain why the right answer is right AND why every wrong option is wrong - the fastest way to find your gaps before exam day. Works on your phone or laptop.
👉 https://payhip.com/b/CLvcu
🏷️ Listeners get 20% off with code PASS
━━━━━━━━━━━━━━━━━━━━
#AWS #VPC #SecurityGroups #NACL #SAAC03 #Networking
Tags: AWS, VPC, Networking, Security Groups, NACL, NAT Gateway, Subnets, Solutions Architect, SAA-C03, Cloud Networking, Route Tables, VPC Peering, Stateful, Stateless, AWS Exam, Tech Podcast