Vpc Connectivity Whitepapers

Front 1

What is the big idea of the white paper?

Back 1

• You can use the internet, or you can use an AWS Direct connection as the plumbing to link together all the network parts (the backbone)
• The connection can terminate into either AWS managed endpoints, or your own internal networks
• The other configuration option you have is HOW routing is delivered between AWS and your own on-premises services.

Front 2

What is the idea of a VPC itself?

Back 2

It's a section of the AWS cloud that you can own, unlike say a SAAS where you don't control their IP

Front 3

What are the 3 kinds of connection discussed?

Back 3

• Network-to-Amazon VPC Connectivity Options
  
• VPC to VPC Connectivity
• Internal user to VPC

Front 4

What is the big idea behind Network to VPC Connectivity?

Back 4

• For extending onsite services into the AWS Cloud
• The best practice is use a different, contiguous CIDR block per VPC
• A managed VPN is a customer network connection to a gateway, whereby the gateway can have different availability zones
• The customer network (on-prem) uses a gateway on its end to 'reach out'
• Gateway to gateway comms over an IpSec tu nnel

Front 5

How does AWS Direct Connect work?

Back 5

• AWS has a VPC gateway with VPC subnets in multiple availability zones
• There is a VLAN connection between the gateway and and the AWS Direct Connect Endpoint
• The AWS Direct Connect Endpoint is connected to the customer network via a WLAN, which the WLAN provider needs to set up
• VPC's have EC2 instances in a private subnet, so only you can connect to them from the outside world.

Front 6

How do you use AWS Direct Connect as a 'traffic cop', even if they are in different regions?

Back 6

Because the customer network (on-prem) side deals with a single connection - on the other end, it doesn't matter.

Front 7

How does direct connect with a VPN work?

Back 7

• Same as Direct Connect, except on the VPC side there is a VPN.
• This means that the customer network can deal with the private part of the VPC via the tunnel
• Outside of direct connect the only way in is via the public part

Front 8

What is a transit VPC?

Back 8

• Provide one VPC to connect disparate, multi region VPCS
• Can centralise network rules filtering etc here

Front 9

What is the use case for VPC to VPC peering?

Back 9

• Integrating multiple VPC's into a larger one
• Billing and security can be segregated but the resources of the network appears to be transparently linked

Front 10

What is the security benefit of VPC peering?

Back 10

Even if resources communicated across accounts and regions, the traffic never leaves the AWS backbone

Front 11

What is the advantage of a managed VPN?

Back 11

• You have one outbound connection from a customer network point of view
• These are hubs out to multiple different VPC's depending on the header traffic

Front 12

What is AWS private link used for?

Back 12

• You create a network interface in your VPC
• That connect with resources in another VPC transparently in different accounts