Infrastructure Protection

Amazon Web Services relies on old and new infrastructure concepts to support applications on the AWS Cloud. Infrastructure protection in the AWS Cloud is reinforced by AWS Elastic Load Balancing, VPC Endpoints, VPC Flow Logs, AWS Web Application Firewal, and AWS Shield. This chapter introduces various AWS networking concepts such as Amazon Virtual Private Cloud (VPC), subnets, and route tables, as well as other features that are related to network address translation and traffic filtering (security groups and network access control lists). It explores how AWS Elastic Load Balancing works and how security services such as AWS Web Application Firewall can provide secure access to readers' web‐based applications deployed in the cloud. The chapter also explores AWS’s unique approach to mitigate distributed denial‐of‐service attacks while being introduced to AWS Shield.