Tips and tricks AWS Solutions Architect Associate #14

VPC & Networking

• VPC Sharing: Plusieurs comptes partagent le même VPC pour réduire duplication et coûts.

• Private IP ranges (RFC1918):

  • 10.0.0.0/8

  • 172.16.0.0 – 172.31.255.255 (/12)

  • 192.168.0.0/16

• Elastic IP: IP publique fixe attachée à une ressource (ex: EC2).

• Instance Connect: Se connecter à une instance EC2 depuis la console (SSH intégré).

---

VPC Endpoints

• Interface Endpoint:

  • Uses ENI (Elastic Network Interface) in your subnet.

  • For services like EC2, SSM, etc.

  • Paid.

• Gateway Endpoint:

  • For S3 & DynamoDB.

  • Free.

  • Requires route table update in the same VPC.

---

Transfer Family

• Managed FTP / SFTP / FTPS to move files in/out of AWS securely (typically to S3).

---

DNS & Routing

• A Record: IPv4.

• AAAA Record: IPv6.

• CNAME: Alias to another domain.

• Alias (Route 53): AWS-specific record pointing directly to AWS resources (e.g., ALB, S3, CloudFront).

---

Other Services

• Redshift Enhanced VPC Routing: Forces all COPY/UNLOAD traffic through VPC endpoints (instead of public internet).

• EFA (Elastic Fabric Adapter): High-performance network interface for HPC (High Performance Computing) & tightly coupled workloads (e.g., MPI).

---

⚡ In short:

• VPC sharing optimizes multi-account setups.

• VPC endpoints (interface vs gateway) give private access to AWS services without going through Internet.

• Transfer Family offers managed file transfer (FTP/SFTP).

• DNS in Route 53 supports standard + AWS-specific alias records.

• Elastic IPs & EFA extend networking from basic static IPs to HPC-grade performance.