VPC
Background[edit | edit source]
VPC is used to isolate cloud resources and provide a secure access layer.
Detail[edit | edit source]
A single VPC[1] is used.
Resource map shows there are 3 subnets (one in each availability zone). The subnets are all then linked to a single route table[2].
This route table is then used by the following network connections:
- Internet gateway
igw-04a7da4711412273a - S3 endpoint
vpce-034a0ced380857594 - DynamoDB endpoint
vpce-01878f78f331d1553.
Functionally these allow isolation of the RDS data store, but permit S3 and DDB services to access it.[3]