AWS Network Zones
Public Internet Zone
AWS Public Zone: public service on this zone， anyone can connect to, but need permission.
AWS Private Zone: private service on this zone, located in VPC.
network zone are not permission
AWS Infrastructure
- Some AWS services runs in a regional base, some in global base
- 3 resilience: global resilient, region resilient, AZ resilient
AWS Region
- Full compute, storage, DB, AI analytics….
- A region has region code and region name
benefit: geographic separation - isolated fault domain, different governance
location control - performance
Availability Zone
Isolated infrastructures insides a region
AWS Edge
Much smaller than region
Most only have content distribution services
Many more than regions
Suitable for distribution service provider companies like Netflix
VPC(Virtual Private Could)
Intro
- VPC is a virtual network inside AWS
- When you create a private service in AWS, you associate it with a VPC and one or more subnets within that VPC
- A VPC is within 1 account and 1 region, so it is regional service, means it is regional resilient
- 2 types: default VPC, custom VPC, only 1 default VPC in a region but a region can have a lot of custom VPC
- No traffic between 2 VPC, unless you configure
- VPC structure, default VPC CIDR is always 172.31.0.0/16
- /20 subnet in each AZ in the region
- Do not use default VPC
- VPC structure
