Tutorials References Exercises Bootcamp Menu
Sign Up Create Website Get Certified Upgrade

AWS Cloud Tutorial

AWS HOME AWS Intro AWS Cloud Certification AWS Get Started AWS Cloud Computing AWS Cloud Benefits AWS EC2 Intro AWS EC2 Instance Types AWS EC2 Pricing AWS EC2 Scaling AWS EC2 Auto Scaling AWS Elastic Load Balancing AWS Messaging AWS SNS AWS SQS AWS Serverless AWS Lambda AWS Containers AWS ECS AWS EKS AWS Fargate AWS First Recap AWS Infrastructure AWS Regions AWS Availability Zones AWS Edge Locations AWS Provision AWS Provision Services AWS Elastic Beanstalk AWS CloudFormation AWS Second Recap AWS Networking AWS Connectivity AWS Subnet and Access AWS Global Networking AWS Third Recap AWS Storage and DBs AWS Instance Stores AWS EBS AWS S3 AWS EBS vs S3 AWS Elastic File System AWS RDS AWS DynamoDB AWS DynamoDB vs RDS AWS Redshift AWS DMS AWS Additional DB Services AWS Fourth Recap AWS Cloud Security AWS Shared Responsibility AWS User Access AWS Organizations AWS Cloud Compliance AWS DDoS AWS Other Services AWS Fifth Recap AWS Monitoring and Analytics AWS CloudWatch AWS CloudTrail AWS TrustedAdvisor AWS Sixth Recap AWS Pricing and Support AWS Free Tier AWS Pricing Models AWS Billing Dashboard AWS Consolidated Billing AWS Budgets AWS Cost Explorer AWS Support Plans AWS Marketplace AWS Seventh Recap AWS Migration and Innovation AWS Cloud Adoption Framework AWS Migration Strategies AWS Snow Family AWS Innovation AWS Eight Recap AWS Cloud Journey AWS Well-Architected Framework AWS Cloud Benefits AWS Ninth Recap AWS Exam Preparation

AWS Examples

AWS Cloud Exercises AWS Cloud Quiz


AWS Fundamentals

More AWS

AWS Machine Learning AWS Serverless

AWS Cloud Subnet and Access

Subnets and Network Access Control Lists Video

Subnets control access to the gateways.

W3schools.com collaborates with Amazon Web Services to deliver digital training content to our students.


A Subnet is a section of a VPC.

The Subnet allows you to group resources.

The groupings can have different security or operations needs.

You can have both public and private Subnets.

Public Subnets

Public Subnets have resources that the public can access.

For example, your company page, such as W3Schools.com.

Private Subnets

Private Subnets have resources that can only be accessed through the private network.

For example, databases holding customer data.

Public and Private Subnets can communicate with each other through secure channels.

Network Traffic in a VPC

Requested data are sent as a Packet.

A Packet is a package of data sent over a network or the internet.

It enters the VPC through an Internet Gateway.

Before entering a Subnet it checks for permissions.

Checking permissions such as:

  1. Who sent the Packet?
  2. How will the Packet communicate with the resources in the Subnet

Network Access Control Lists

Network Access Control Lists are called ACLs.

ACL is a firewall that controls the traffic, both inbound and outbound.

It controls the traffic at the subnet level.

The ACL checks and controls the Packets.

If the Packet is on the approved list, it will pass through.

However, if they are not on the list, they will be denied access.

Read more about permissions in a subnet at The AWS Documentation: Network Access Control List(ACL)

Stateless Packet Filtering

The ACLs do Stateless Packet filtering.

They have no memory and will forget the request once checked.

Their job is to check the Packets that go in and out.

It uses the set rules to approve or deny access.

Checking if the traveler is on the list and forgets

Image created by Amazon Web Services

Security Groups

A Security Group is a firewall that controls inbound and outbound traffic.

This feature is specific for an AWS EC2 instance.

The default config denies all inbound traffic and allows all outbound.

You have to add new rules to change this config.

Read more about Security Groups at The AWS Documentation: Network Access Control List (ACL)

Stateful Packet Filtering

Security Groups do stateful Packet filtering.

They remember the actions that they have done with Packets in the past.

Firewall checks the access list and remembers

Image created by Amazon Web Services


ACLs and Security groups can be configured.

Configuration means adding custom rules for the traffic.

Overview of network setup

Image created by Amazon Web Services

AWS Cloud Exercises

Test Yourself With Exercises


What is a subnet?

A subnet is a  of a VPC

Start the Exercise