Roadmap › Amazon Web Services (AWS) for .NET and Full Stack Developers › Module: Networking, Integration and Security
Lessons in this course (9)
5. VPC, security groups, load balancers, Route 53, CloudFront and API Gateway
Intermediate★ Must knowLesson 5 of 9
text
Route 53 (DNS) → CloudFront (CDN, WAF, TLS) → Application Load Balancer (public subnets, 2+ AZs)
→ ECS tasks / EC2 instances (private subnets) → RDS (private subnets, Multi-AZ)
NAT Gateway in public subnet gives private resources outbound internet access| Component | Meaning |
|---|---|
| VPC | Your private network (CIDR range, e.g. 10.0.0.0/16) in a region |
| Subnets | Public (route to an Internet Gateway) or private; one per AZ |
| Security group | Stateful firewall on instances/ENIs — allow rules only (e.g. RDS SG allows 1433 only from the app SG) |
| Network ACL | Stateless subnet-level firewall (allow/deny) |
| NAT Gateway | Outbound internet for private subnets |
| VPC endpoints | Private access to S3/DynamoDB/other services without internet |
| ALB | Layer 7 load balancer (HTTP routing, host/path rules, TLS) — for web apps |
| NLB | Layer 4 (TCP/UDP), very high throughput, static IPs |
| Route 53 | DNS + health checks + routing policies (latency, weighted, failover, geolocation) |
| CloudFront | CDN with edge caching, TLS (ACM certificates), origin access to S3 |
| API Gateway | Managed API front door: REST/HTTP/WebSocket APIs, auth (Cognito/JWT/IAM), throttling, Lambda integration |