Chapter 3: Creating a Data Center in the Cloud Using VPC
In the previous chapter, you learned how to tighten security with the help of IAM policies and how to use IAM roles to assign temporary credentials to role sessions so that you no longer need to embed them inside your application. IAM provides security at the authentication level, that is, who is allowed or denied, and the authorization level is what that authenticated user or role is allowed to do. In the next level of defense, we need to secure our network so that only the users from the trusted network can access our service, and that is where VPC comes into the picture.
AWS Virtual Private Cloud (VPC) is your data center in the cloud. In VPC, you can define your own private network, which resembles a network in a traditional data center but with the advantage of using AWS's scalable infrastructure. Some of the benefits of using AWS VPC are as follows:
- Simple: Creating VPC is pretty quick and straightforward...