Network Address Translation DevicesAlthough network address translation occurs at the Internet gateway, there are two other resources that can also perform NAT.■ NAT gateway■ NAT instanceAWS calls these NAT devices. The purpose of a NAT device is to allow an instance to access the Internet while preventing hosts on the Internet from reaching the instance …
VPC CIDR Blocks Like a traditional network, a VPC consists of at least one range of contiguous IP addresses. This address range is represented as a Classless interdomain routing (CIDR) block. The CIDR block determines which IP addresses may be assigned to instances and otherresources within the VPC. You must assign a primary CIDR block …
Securing Your EC2 Instance You are responsible for configuring appropriate and effective access controls to protect your EC2 instances from unauthorized use. Broadly speaking, AWS provides four tools to help you with this task: security groups, Identity and Access Management (IAM) roles, network address translation (NAT) instances, and key pairs. Security Groups An EC2 security …
Amazon Elastic Compute Cloud and Amazon Elastic Block Store-4 Read More »
Configuring an Environment for Your Instance Deciding where your EC2 instance will live is as important as choosing performance configuration. Here, there are three primary details to get right: geographic region, virtual private cloud (VPC), and tenancy model. AWS Regions As you learned earlier, AWS servers are housed in data centers around the world and …
Amazon Elastic Compute Cloud and Amazon Elastic Block Store-2 Read More »
EC2 Instances An EC2 instance may only be a virtualized and abstracted subset of a physical server, but it behaves just like the real thing. It’ll have access to storage, memory, and a network interface, and its primary drive will come with a fresh and clean operating system running. It’s up to you to decide …
Amazon Elastic Compute Cloud and Amazon Elastic Block Store-1 Read More »
Cloud Computing and VirtualizationThe technology that lies at the core of all cloud operations is virtualization. As illustrated inFigure 1.1, virtualization lets you divide the hardware resources of a single physical serverinto smaller units. That physical server could therefore host multiple virtual machines running their own complete operating systems, each with its own memory, storage, …
