What is vpc
Last updated: April 1, 2026
Key Facts
- VPC provides complete control over network configuration including IP addressing, subnets, and routing tables
- Users can create public and private subnets to control resource accessibility from the internet
- Security groups and network access control lists (NACLs) provide firewall functionality
- VPCs support hybrid connectivity to on-premises data centers through VPN or Direct Connect
- Each AWS region has a default VPC automatically created, but users can create multiple custom VPCs
What is a Virtual Private Cloud?
A Virtual Private Cloud (VPC) is a logically isolated section of Amazon Web Services (AWS) cloud where users can launch AWS resources in a defined virtual network. It provides a secure, customizable networking environment that functions similarly to a traditional data center network but with the flexibility and scalability of cloud computing.
Key Components
A VPC consists of several fundamental components that work together to create a complete networking infrastructure:
- Subnets: Divisions of a VPC's IP address space, either public (accessible from the internet) or private (internal only)
- Internet Gateway: Enables communication between VPC resources and the internet
- Route Tables: Define rules (routes) that determine where network traffic is directed
- Security Groups: Act as virtual firewalls controlling inbound and outbound traffic
- Network Access Control Lists (NACLs): Provide additional layer of security at the subnet level
Network Architecture
VPC allows architects to design sophisticated network topologies. Organizations can create multi-tier applications by placing web servers in public subnets and databases in private subnets. This separation ensures sensitive resources remain protected from direct internet access while still communicating internally. Users can implement VPN connections to securely connect their VPC to on-premises networks, creating hybrid cloud environments.
Security and Isolation
Each VPC is completely isolated from other VPCs by default, ensuring that resources in one VPC cannot directly access resources in another without explicit configuration. This isolation extends to IP address ranges, which must be unique per VPC. Organizations can implement defense-in-depth strategies using multiple layers of security controls at the VPC, subnet, and instance levels.
Cost and Management
There is no additional cost for creating a VPC itself; users only pay for the resources they deploy within it, such as EC2 instances, data transfer, and NAT gateways. VPCs scale automatically as businesses grow, and AWS provides comprehensive monitoring and management tools for oversight.
Related Questions
What's the difference between public and private subnets?
Public subnets have routes to the internet through an internet gateway, making resources accessible from the internet. Private subnets have no direct internet access, protecting resources like databases while still allowing outbound communication through NAT gateways or bastion hosts.
Do I need to create a VPC or is one provided automatically?
AWS automatically creates a default VPC in each region when an account is created. However, users can create additional custom VPCs for specific applications, better security isolation, or multi-tenant deployments.
How do security groups differ from network ACLs?
Security groups operate at the instance level and are stateful, automatically allowing return traffic. Network ACLs operate at the subnet level, are stateless, and apply to all traffic entering or leaving a subnet.
More What Is in Daily Life
Also in Daily Life
More "What Is" Questions
Trending on WhatAnswers
Browse by Topic
Browse by Question Type
Sources
- AWS VPC DocumentationAWS
- Wikipedia - Virtual Private CloudCC-BY-SA-4.0