DevOps Engineer at a consultancy with 51-200 employees
Apr 9, 2024
For network security, Network Access Control Lists (NACLs). They work very well. For example, instead of leaving a resource open to the world with something like 0.0.0.0/0, we can use NACLs to be much more specific with our network traffic rules. It adds an important security layer to our infrastructure.
Learn what your peers think about Amazon Virtual Private Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
One important tool we use is Transit Gateway, which helps connect different parts of our network. We also use Internet Gateways, NAT Gateways, and Route Tables to ensure our applications run smoothly on AWS. While most people use these basics, some specialized tools, like Transit Gateway, are useful for specific needs.
DevOps Engineer at Upperthrust Technologies Private Limited
Mar 20, 2024
I recommend introducing Amazon VPC to others as it provides an excellent entry-level understanding of cloud computing and its relevance in today's world.
IT Systems Administrator at a tech services company with 1-10 employees
May 29, 2022
The best feature is that you can run your servers directly on Amazon's premises, and have access to the internet without Amazon utilizing your own internet connection in your office.
AWS Presales Solutions Architect at Escala 24x7 Inc.
Sep 26, 2024
I like that within the same AWS account, you can have different scenarios and workloads. You can isolate workloads using different VPCs, reducing the exposure of critical services.
VPC itself is pretty good, but understanding it well is key. One of the challenges for beginners is understanding IP address ranges and subnet concepts.
In Amazon VPC, there's room for improvement. For example, when we create security groups, I think we should be able to restrict outgoing traffic to secured websites. I know there's a method to restrict that, but we should also be able to design outgoing traffic restrictions at the system level. We should use that to deny ports instead of relying solely on network access controls at the subnet level.
Learn what your peers think about Amazon Virtual Private Cloud. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
I recently worked on Transit Gateway, which connects multiple VPCs in one account and enables communication between them. However, I found the documentation unclear, possibly because few people encounter this situation. I figured it out and implemented it, but it required some research. Most people prefer using infrastructure as code rather than the UI for AWS tasks. However, the documentation may not always be up to date.
IT Systems Administrator at a tech services company with 1-10 employees
May 29, 2022
This solution is not fully compatible with every vendor that we use regarding firewalls and networking equipment. They provide you with the option and details on how to configure this on your premises but it would be good to have an easier way to do this.
