What is vpc

Last updated: April 1, 2026

Quick Answer: A Virtual Private Cloud (VPC) is an isolated network environment in the cloud where users can launch computing resources with custom IP address ranges and security controls. It's Amazon's core networking service for building secure, scalable cloud infrastructure.

Key Facts

What is a Virtual Private Cloud?

A Virtual Private Cloud (VPC) is a logically isolated section of Amazon Web Services (AWS) cloud where users can launch AWS resources in a defined virtual network. It provides a secure, customizable networking environment that functions similarly to a traditional data center network but with the flexibility and scalability of cloud computing.

Key Components

A VPC consists of several fundamental components that work together to create a complete networking infrastructure:

Network Architecture

VPC allows architects to design sophisticated network topologies. Organizations can create multi-tier applications by placing web servers in public subnets and databases in private subnets. This separation ensures sensitive resources remain protected from direct internet access while still communicating internally. Users can implement VPN connections to securely connect their VPC to on-premises networks, creating hybrid cloud environments.

Security and Isolation

Each VPC is completely isolated from other VPCs by default, ensuring that resources in one VPC cannot directly access resources in another without explicit configuration. This isolation extends to IP address ranges, which must be unique per VPC. Organizations can implement defense-in-depth strategies using multiple layers of security controls at the VPC, subnet, and instance levels.

Cost and Management

There is no additional cost for creating a VPC itself; users only pay for the resources they deploy within it, such as EC2 instances, data transfer, and NAT gateways. VPCs scale automatically as businesses grow, and AWS provides comprehensive monitoring and management tools for oversight.

Related Questions

What's the difference between public and private subnets?

Public subnets have routes to the internet through an internet gateway, making resources accessible from the internet. Private subnets have no direct internet access, protecting resources like databases while still allowing outbound communication through NAT gateways or bastion hosts.

Do I need to create a VPC or is one provided automatically?

AWS automatically creates a default VPC in each region when an account is created. However, users can create additional custom VPCs for specific applications, better security isolation, or multi-tenant deployments.

How do security groups differ from network ACLs?

Security groups operate at the instance level and are stateful, automatically allowing return traffic. Network ACLs operate at the subnet level, are stateless, and apply to all traffic entering or leaving a subnet.

Sources

  1. AWS VPC DocumentationAWS
  2. Wikipedia - Virtual Private CloudCC-BY-SA-4.0