VPC

 

stateless / add or remove rules/ inbound rules , by CIDR

private ip 

public ipo cannot reuse 

and elastic ip can be reused to another instance

create ec2 key pair

1. vpc--> your vpc--> create vpc-->vpc only--name vpc--> add ip 10.0.0.0/24  (ipv4) --create vpc is created.

2. vpc console--> network acls--> nacl01(nameit) select vpc(just createdone) -->crtea n/w acl.

3. vpc flow log feature is to capture ip traffic from (vpc) .. pubclished cloud watch/s3 and retrieve (diaglotics, security group stoping traffic, more inbound /or outbound)

4. flow log for sub net / vpc 

aws consule -- s3 console--giveabucketname--createbucket-->vpc console-->selectecrtedone-->createflow-->defaultoptions..>find arn of s3bckt -->

internet gateway--> if ipv4 public address --> egress-only igway. is a scalable for ipv6 -- vpc--> canot talk to ec2 from internet.

NAT-- pvt subnet--outside vpc--cannot initate connection to instances.

private subnet -- ec2 cannot connect to internet directly, connect to NAT--(public subnet) -- connect to internet.