SYSTEM-DESIGN
    intermediate

    VPC & Subnets

    Software Engineer path · lesson 68 of 99
    Public Internet
    AWS VPC (10.0.0.0/16)
    IGW
    Public Subnet (10.0.1.0/24)
    Web Server 1
    Web Server 2
    Private Subnet (10.0.2.0/24)
    Database Primary
    Database Replica

    Scroll right to see the Private Subnet →

    Ready

    Public or private subnet?

    Sort

    Sort each resource or rule into the subnet it belongs to.

    Tap a piece, then tap where it goes — or drag it. Tap the tray to take one back.

    Public subnet

    Drop items here

    Private subnet

    Drop items here
    6 pieces left to place

    Test your knowledge

    21 questions
    Question 1 of 21
    Score: 0

    What allows resources within a Public Subnet to communicate with the outside internet?

    The short version

    A VPC is like an office building. The Internet Gateway is the front door. The Public Subnet is the reception area where anyone can walk in. The Private Subnet is the back office where only employees who passed reception can enter.

    In more depth

    Virtual Private Cloud (VPC)

    A VPC lets you provision a logically isolated section of the cloud where you can launch resources in a virtual network that you define.

    Key Components

    Internet Gateway (IGW): A horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet.
    Public Subnet: A subnet whose route table directs internet-bound traffic to the IGW.
    Private Subnet: A subnet without a direct route to the IGW. Resources here need a NAT Gateway to initiate outbound internet requests, but cannot receive inbound connections from the internet.

    Interview Questions

    Amazon
    Google
    Amazon
    Microsoft
    Stripe
    Amazon
    Netflix
    Airbnb
    Amazon
    Google
    Netflix

    Love this visualization?

    Sign up to track your progress, earn achievements, use the AI assistant, and access your personal learning dashboard.

    100% free • No credit card required