This document provides an overview of Amazon Route 53 and VPC components. It discusses Route 53's DNS services and routing types. It then covers VPC concepts like subnets, route tables, gateways and patterns like single public subnets, public and private subnets with NAT instances, and private subnets with VPN access. Security groups for EC2-VPC instances allow changing their security groups after creation within a VPC.

1. 3 AWS - Route 53, VPC
Artem Zhurbila
artem.zhurbilo@itechart-group.com
artemzhurbilo@gmail.com

2. Agenda
1. Route53 overview
2. DNS records and routing types
3. Route53 HealthCheck
4. VPC overview
5. VPC components (subnets, route tables, gateways,
NAT, ACL, security groups)
6. Four VPC patterns
2

3. Amazon Route 53 overview
Amazon Route 53 - Domain Name
System (DNS) service.
- 100% Available
- works with Elastic Load Balancing
load balancers, Amazon S3 buckets,
CloudFront
3

4. 4

5. 5

6. 6
Records and routing types

7. Latency-Based Routing (LBR)
LBR lets you use DNS to route user requests to the Amazon
EC2 region that will give your users the fastest response.
7

8. 8

9. 9
VPC
Virtual Private Cloud (VPC) - enables you to launch AWS
resources into a virtual network.
ELB, ElastiCache, RDS, and Redshift are provisioned with
IP addresses within your VPC. Other AWS resources such
as S3 and DynamoDB are accessible via your VPC’s
Internet Gateway or Virtual Private Gateway.

10. 10

11. VPC
11

12. 12
Single public subnet

13. 13

14. Subnet Auto assign IP option
14

15. 15
Public and private subnet
Note: to ssh NAT instance you need add security group with open 22 port. And NAT instance based
on Amazon Linux AMI, thats why we need use ‘ec2-user’ to get access.

16. NAT and private subnet
Default Amazon AMI NAT
contains script:
/usr/local/sbin/configure-
pat.sh
to configure NAT
16

17. 17

18. 18
Public, private subnet and VPN access

19. 19

20. 20

21. 21
Private subnet only and VPN access

22. Elastic IP associate
22

23. Security Groups for EC2-VPC
● After creation of EC2-Classic instance, you can't change
its security groups.
● After creation of a VPC instance, you can change its
security groups.
- Each security group is attached to specific VPC.
23

24. 24

25. 25
Artem Zhurbila
artemzhurbilo@gmail.com
artem.zhurbilo@itechart-group.com
https://www.linkedin.com/in/zhurbila