Service VPC

NOT FOR DISTRIBUTION © Stephane Maarek www.datacumulus.com

Users CloudFront S3 CloudWatch VPC

example.com?

11.22.33.44
Internet Transit
Application Network Gateway On-premise
service Load Balancer
Route53
(DNS)
VPC
Region
PrivateLink Flow Logs
VPC
VPC 10.0.0.0/16
Lambda

Availability Zone Availability Zone

SQS
Public subnet Public subnet Peering
VPC Endpoint connection
SNS (interface) NAT Gateway Client VPN
Application Load Client
Balancer Endpoint
Private subnet Private subnet

Corporate data
S3 Web/App Server Web/App Server Direct Connect center (on-prem)
Private subnet Private subnet
DynamoDB
VPC Endpoint
(gateway) VGW
VPN 192.168.0.0/16
© Stephane Maarek, Chetan Agrawal