AWS EC-2 Basics

Region & Availability Zones:

Amazon EC2 is hosted in multiple locations world-wide. These locations are composed of
Regions and Availability Zones. Each Region is a separate geographic area.
Each Region has multiple, isolated locations known as Availability Zones.
We can place our instances in multiple locations.
**Note: A VPC spans all the Availability Zones in the region.
 AWS EC-2 Basics
VPC:
VPC stands for Virtual Private Cloud. It is your logical isolated space on Aws. By default 1 VPC
is always available per region. We can create 5 VPC per regions, but can be extended upon
request to Amazon.
 AWS EC-2 Basics
Subnets:
Few things to understand about subnets in AWS:

1) By default we can create upto 200 subnets in a single VPC.

2) Subnets cannot be extended to more than one availability zone.

3) Subnet cannot be associated with multiple Route table at the same time.

4) Route table can be associated with multiple subnets.

** Note: In AWS we can use ip range -5 , meaning out of 256 addresses of /24 subnet we can
only use 251 because of reserved 5 ip’s
1-Network Address 2- VPC Router 3- DNS 4- Reserved by AWS 5- Broadcast Address.
 AWS EC-2 Basics
Internet Gateway & Router In AWS:
WE can create Five Internet Gateway per Region

This limit is directly correlated with the limit on VPCs per Region. To increase this limit,

increase the limit on VPCs per Region.

Only one internet gateway can be attached to a VPC at a time.

Route Table:
The Route table controls the routing for all subnets that are not explicitly associated with any other
route table

When you create a VPC, it automatically has a main route table. Route table can be associated with

multiple subnet, however subnet cannot be associated with multiple Route table.
 AWS EC-2 Basics
Security Groups:
Few things to understand about security Groups in AWS:

1) They are Virtual Firewalls & We can have 5 Sec Groups Per EC-2 Instance

2) They are state-full, meaning that they keep the information of Packets, leaving and entering
the Firewall and can make intelligent decision as per the information.

3) Sec groups have only Permit rules. There’s no deny rule.

4) Each VPC created will have a default Sec Group. Default Sec Group cannot be deleted.

5) When we create a Custom Security Group, All inbound traffic is denied, however all outbound
traffic is allowed.