One important tool we use is Transit Gateway, which helps connect different parts of our network. We also use Internet Gateways, NAT Gateways, and Route Tables to ensure our applications run smoothly on AWS. While most people use these basics, some specialized tools, like Transit Gateway, are useful for specific needs.
DevOps Engineer at Upperthrust Technologies Private Limited
Mar 20, 2024
I recommend introducing Amazon VPC to others as it provides an excellent entry-level understanding of cloud computing and its relevance in today's world.
IT Systems Administrator at a tech services company with 1-10 employees
May 29, 2022
The best feature is that you can run your servers directly on Amazon's premises, and have access to the internet without Amazon utilizing your own internet connection in your office.
VPC itself is pretty good, but understanding it well is key. One of the challenges for beginners is understanding IP address ranges and subnet concepts.
In Amazon VPC, there's room for improvement. For example, when we create security groups, I think we should be able to restrict outgoing traffic to secured websites. I know there's a method to restrict that, but we should also be able to design outgoing traffic restrictions at the system level. We should use that to deny ports instead of relying solely on network access controls at the subnet level.
I recently worked on Transit Gateway, which connects multiple VPCs in one account and enables communication between them. However, I found the documentation unclear, possibly because few people encounter this situation. I figured it out and implemented it, but it required some research. Most people prefer using infrastructure as code rather than the UI for AWS tasks. However, the documentation may not always be up to date.
IT Systems Administrator at a tech services company with 1-10 employees
May 29, 2022
This solution is not fully compatible with every vendor that we use regarding firewalls and networking equipment. They provide you with the option and details on how to configure this on your premises but it would be good to have an easier way to do this.
