Amazon VPC
What is it?
Amazon VPC is your own private, isolated network within AWS, where you control how your cloud resources are addressed, connected, and secured.
Explain like I'm 5
Why was it created?
Cloud resources need network isolation and control. VPC was created so you can run AWS resources in a private network you configure, rather than wide open.
Where is it used?
- Isolating cloud resources
- Controlling network access
- Connecting to on-premises networks
- Securing multi-tier apps
Why should developers care?
VPC underpins networking and security on AWS, so understanding it is essential for designing safe cloud architectures.
How does it work?
You define a private IP address range and divide it into subnets (public or private). Routing tables, security groups, and gateways control what traffic flows in, out, and between resources, giving you a configurable, isolated network.
Real-world example
An app runs web servers in a public subnet and its database in a private subnet with no direct internet access, all inside one VPC.
Common use cases
- Network isolation
- Public/private subnet design
- Controlled internet access
- Hybrid connectivity to on-premises
Advantages
- Network isolation and control
- Public/private segmentation
- Fine-grained security rules
- Connects to other networks
Disadvantages
- Networking concepts are complex
- Easy to misconfigure
- Mistakes can expose or block resources
- Steep learning curve
When should you use it?
Whenever you run AWS resources that need controlled, secure networking — which is most non-trivial setups.
When should you avoid it?
You generally can't avoid it on AWS; the goal is configuring it correctly.
Alternatives
Related terms
Interview questions
Beginner
- What is a VPC?
- What is a subnet?
Intermediate
- What's the difference between a public and private subnet?
- What is a security group?
Senior
- How would you design a secure multi-tier VPC?
- How do you connect a VPC to an on-premises network?
Common misconceptions
- "A VPC automatically makes resources secure" — security depends on how you configure subnets, routing, and security groups.
- "Everything in a VPC is internet-facing" — private subnets can have no direct internet access by design.
Fun facts
- VPC stands for Virtual Private Cloud.
- Public versus private subnets is determined by their routing, not a single setting.
Timeline
- 2009 — Amazon VPC launches
Learning resources
Quick summary
Amazon VPC is your isolated, configurable private network in AWS, where subnets, routing, and security rules control how resources connect.
Cheat sheet
- Your private network in AWS
- Subnets: public and private
- Security groups + routing control access
- Foundation of AWS networking