AWS Certified Security Study Guide by unknow

Author:unknow
Language: eng
Format: mobi
ISBN: 9781119658849
Publisher: Wiley
Published: 2021-01-20T00:00:00+00:00

FIGURE 5.42 VPC interface endpoint creation

In Exercise 5.7, you will work with VPC endpoints.

EXERCISE 5.7 Work with VPC Endpoints

Building on Exercise 5.6, you will work with VPC endpoints.

Create a VPC gateway endpoint called GW-EP to connect PrivateSubnet-A and PrivateSubnet-B to Amazon S3 in the region you have chosen.

Verify that Private-RouteTable-A and Private-RouteTable-B were changed to provide communication between the subnets and the VPC gateway endpoint.

VPC Flow Logs

Connectivity without visibility can be as troublesome as driving a car without a dashboard. To provide traffic transparency in your VPCs, AWS has created VPC flow logs. This feature enables you to capture flow information (which includes IP addresses, transport protocol, and ports) about the traffic going to and from network interfaces in your VPC.

You can create a flow log for a VPC, a subnet, or a specific network interface. If you define a flow log for a subnet (or VPC), each network interface in that subnet (or VPC) is consequently monitored.

There are two places where you can send VPC flow log information: Amazon CloudWatch Logs or Amazon S3. Figure 5.43 shows the creation of the flow logs for a subnet (Subnet10-AZ1a).

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.