Lesson 15 / 28
VPC Basics
Design a VPC with public and private subnets, route tables and gateways for isolated, secure networking.
A private network in the cloud
A VPC (Virtual Private Cloud) is your own logically isolated network within AWS, with its own IP address range, where you place all your resources.
Public vs private subnets
A VPC is split into subnets. A public subnet has a route to the internet (for load balancers, bastion hosts). A private subnet has no direct route in — used for databases and internal servers.
A gated community
A VPC is a gated community. The public street (public subnet) lets visitors reach the reception (load balancer). The inner lanes (private subnets) are only reachable from inside — that's where the residents (databases) live.