Sage-Tips

Which actions are best practices for designing a virtual private cloud VPC?

Best practices and reference architectures for VPC design

• Start with a single VPC network for resources that have common requirements.
• Use Shared VPC for administration of multiple working groups.
• Grant the network user role at the subnet level.
• Use a single host project if resources require multiple network interfaces.

Which security features are within Amazon Virtual Private Cloud?

Network/subnet security AWS describes security groups as virtual firewalls. VPCs also provide network access control lists (NACLs) to stateless VPC subnets—that is, the state of the connection is not maintained.

Which of the following AWS services are used to secure your VPC network?

Amazon Virtual Private Cloud provides features that you can use to increase and monitor the security for your virtual private cloud (VPC): Security groups: Security groups act as a firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level.

What happens when you use Amazon Virtual Private Cloud?

Amazon Virtual Private Cloud (Amazon VPC) gives you full control over your virtual networking environment, including resource placement, connectivity, and security.

Which best describes Amazon VPC?

Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you’ve defined. This virtual network closely resembles a traditional network that you’d operate in your own data center, with the benefits of using the scalable infrastructure of AWS.

What happens when you use Amazon Virtual Private Cloud Amazon VPC to create a new VPC?

AWS will automatically create a default VPC for you and will create a default subnet in each Availability Zone in the AWS region. Your default VPC will be connected to an Internet gateway and your instances will automatically receive public IP addresses, just like EC2-Classic.

What can you use to quickly connect your office securely to your Amazon VPC?

AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC). AWS Client VPN enables you to securely connect users to AWS or on-premises networks.

Which technique should you use to secure Amazon DynamoDB?

Use the DynamoDB Encryption Client for client-side encryption, in which you encrypt your table data before you send it to DynamoDB. You may choose to do this based on your data’s sensitivity and your application’s security requirements. For more information, see Client-Side and Server-Side Encryption.