Setting Up a Virtual Private Cloud (VPC)
Objective: Create a VPC to isolate resources.
Log into AWS Management Console.
Navigate to the VPC dashboard.
Click on “Create VPC”.
Enter details:
Name: my-new-vpc
IPv4 CIDR block: 10.0.0.0/16 (explained as a range of IP addresses available within the VPC).
Click “Create VPC”.
Creating Public and Private Subnets
Objective: Establish separate network segments within the VPC for public and private resources. Navigate to the Subnets section within the VPC dashboard.
Public Subnet:
Click on “Create Subnet”.
Name: public-subnet
VPC: my-new-vpc
Availability Zone: us-east-1a
IPv4 CIDR block: 10.0.0.0/24
Private Subnet:
Name: private-subnet
VPC: my-new-vpc
Availability Zone: us-east-1b
IPv4 CIDR block: 10.0.1.0/24
Launching EC2 Instances
Launching a Public EC2 Instance
Objective: Deploy an Amazon EC2 instance in the public subnet.
Navigate to the EC2 dashboard.
Click on “Launch Instance”.
Configure instance details:
Name: my-public-instance
Instance Type: t2.micro
Network: my-new-vpc
Subnet: public-subnet
Auto-assign Public IP: Enable
Security Group: Create or select SG-public with SSH rule.
Launch the instance.
Availability Zone: us-east-1a
Launching a Private EC2 Instance
Objective: Deploy another EC2 instance in the private subnet.
Navigate to the EC2 dashboard.
Click on “Launch Instance”.
Configure instance details:
Name: my-private-instance
Instance Type: t2.micro
Network: my-new-vpc
Subnet: private-subnet
Security Group: Create or select SG-private with SSH rule.
Launch the instance.
Availability Zone: us-east-1b
Internet Access with Internet Gateway
Setting Up Internet Gateway
Objective: Enable internet access for resources in the public subnet.
Navigate to the VPC dashboard.
Click on “Internet Gateways”.
Create a new Internet Gateway named my-internet-gateway.
Attach the Internet Gateway to my-new-vpc.
Configuring Route Tables
Objective: Direct traffic from the public subnet to the Internet Gateway.
Navigate to the Route Tables section in the VPC dashboard.
Create a new route table for the public subnet named public-route-table.
Edit the public-route-table:
Add a route:
Destination: 0.0.0.0/0
Target: my-internet-gateway
Associate the public-route-table with the public-subnet.
Accessing Private Instance via Public Instance
• Accessing the Private Instance
