1. What is it?
   1. Virtual Private Cloud
   2. Logically isolated network (data center) in the AWS cloud
2. Consists of
   1. Subnet (all private IPs)
      1. Subnets cannot span Availability Zones
      2. public subnet
         1. traffic is routed to an IGW
      3. Private subnet
      4. VPN-only
         1. traffic is routed to VPG
      5. internal IP address range is always private
   2. Route tables
      1. a set of rules determining where traffic is directed
   3. DHCP option sets
   4. Security Groups
      1. Virtual stateful firewall Return traffic is automatically allowed
      2. Controls inbound and outbound traffic to EC2 instances
      3. Only allow rules
   5. Network ACLs
      1. Stateless firewall on a subnet level
      2. Support allow and deny rules
3. Optionals
   1. IGWs
   2. EIP addressess
      1. Elastic IP address specific to a region
      2. EIP is an AWS owned static public IP that you allocate to your account and assign to instances or network interfaces on demand
      3. You will be charged if it is not in use or associated to an instance
   3. Endpoints
      1. private connection beween VPC and another AWS service
   4. Peering
      1. No transitive routing
   5. NAT instance and NAT gateway
      1. NAT gateway is an Amazon managed resources
   6. VPG, CGW, and VPN
      1. Establish connection from another network (corp) to AWS VPC