Amazon VPC and VPN detailed difference analysis

Problem Statement: Differentiate between Virtual Private Network (VPN) and Virtual Private Cloud (VPC). Also, explain critical components of the Amazon VPC.                                                                        

Detailed  Analysis 

 

Difference between VPN and VPC

-        VPN gives privacy and anonymity by creating a private network from a public internet connection while  VPC is a secure, isolated cloud within a public cloud.

-        VPN services establish secure and encrypted connections to provide greater privacy; VPNs encrypt your data while online, scrambling it so that others can't read while VPC will have a dedicated subnet and VLAN that are only accessible by the VPC customer. This prevents anyone else within the public cloud from accessing computing resources within the VPC. Thus, the VPC customers get access to his resources even they are part of public cloud.

-        VPN should be used for assuign the privacy of our sensitive data especially when logging onto the internet from a public network (Railway Stations, Airports, etc.).

Critical components of Amazon VPC:

VPC: Virtual private cloud (VPC) — A virtual network dedicated to our AWS account.

Subnet — A range of IP addresses in our VPC.

Route table — A set of rules, called routes, that are used to determine where network traffic is directed.

Internet gateway — A gateway that you attach to your VPC to enable communication between resources in your VPC and the internet.

 

DHCP options sets: Configuration information (such as domain name and domain name server) passed to EC2 instances when they are launched into VPC subnets

VPC endpoint — Enables us to privately connect our VPC to supported AWS services and VPC endpoint services powered by PrivateLink without requiring an internet gateway, NAT device, VPN connection, or AWS Direct Connect connection. Instances in our VPC do not require public IP addresses to communicate with resources in the service.

NAT gateway: A managed AWS service that allows EC2 instances in private subnets to connect to the internet, other VPCs, or on-premises networks.

Security groups: Acts as a virtual firewall to control inbound and outbound traffic for an AWS resource, such as an EC2 instance. Each VPC comes with a default security group, and you can create additional security groups. A security group can be used only in the VPC for which it's created.