You're reading from AWS Security Cookbook Practical solutions for securing AWS cloud infrastructure with essential services and best practices

Product type Paperback

Published in Oct 2024

Publisher Packt

ISBN-13 9781835081891

Length 428 pages

Edition 2nd Edition

Concepts

Cloud Security

Author (1):

Kanikathottu

View More author details

Table of Contents (13) Chapters

Preface

1. Chapter 1: Setting Up AWS Accounts and Organization

2. Chapter 2: Access Management with IAM Policies and Roles FREE CHAPTER

3. Chapter 3: Key Management with KMS and CloudHSM

4. Chapter 4: Securing Data on S3 with Policies and Techniques

5. Chapter 5: Network and EC2 Security with VPCs

6. Chapter 6: Web Security Using Certificates, CDNs, and Firewalls

7. Chapter 7: Monitoring with CloudWatch, CloudTrail, and Config

8. Chapter 8: Compliance with GuardDuty, Macie, Inspector, and Analyzer

9. Chapter 9: Advanced Identity and Directory Management

10. Chapter 10: Additional Services and Practices for AWS Security

11. Index

Why subscribe?

12. Other Books You May Enjoy

Creating a bare VPC and setting up public and private subnets

A public subnet is specifically designed to enable instances within it to be accessible from the internet. This is achieved by routing the internet traffic through an IGW by configuring route tables. In the Setting up VPC plus VPC resources with minimal effort recipe from this chapter, we selected the VPC and more option while creating the VPC as we saw in Figure 5.1, which automatically set up public and private subnets, along with a pre-configured IGW and route tables. For this recipe, we will choose the VPC only option to create a VPC without the additional networking resources and set up an IGW and a route table to enable internet access to the instances in our subnet.

Getting ready

To follow this recipe, we need a working awsseccb-sandbox-1AWS account, and a awsseccbadmin1 user, as described in the Technical requirements section.