Amazon VPC Block Public Access is a new feature that provides a simple, declarative control to authoritatively block incoming and outgoing VPC traffic through ...

Demystify Amazon VPC with this beginner-friendly guide to cloud networking. Learn core concepts like CIDR blocks, public/private subnets, and routing, and discover essential dos and don'ts for designing secure, highly available, and scalable cloud architectures on AWS from day one. Perfect for newcomers looking to master cloud infrastructure best practices.

AWS CloudTrail now offers network activity events for VPC endpoint logging, enabling comprehensive monitoring and recording of AWS API activity through VPC endpoints to enhance security visibility, de...

In the earliest days of Amazon Virtual Private Cloud (Amazon VPC), we thought customers would only ever need a single VPC. We’ve learned a lot since then. Today, the AWS Well-Architected Framework des...

Amazon VPC allows you to create an isolated network in AWS and control how your resources communicate with the internet and each other. This article covers VPCs, subnets, route tables, gateways, and security groups through a simple architecture.

Understand Amazon Virtual Private Cloud and how it provides networking isolation for AWS resources.

Spinifex recreates EC2, S3, EBS, VPC, IAM, and more on your own hardware, so AWS-built software runs unchanged without touching a hyperscaler.

Introduction In this post, we discuss VPC Lattice Transport Layer Security (TLS) Passthrough feature. We walk through how users designed workloads prior to this feature, what this feature provides,…

Learn how Amazon VPC Flow Logs provide visibility into network traffic within AWS. This practical guide explains what Flow Logs are, how they work, why they matter for troubleshooting and security, and how they fit into a modern AWS networking and DevOps workflow.

Securely deliver high-performance web apps with CloudFront VPC origins; serve content directly from private subnets, eliminating undifferentiated work.

Amazon Bedrock AgentCore Gateway and Identity now support VPC egress, enabling secure communication with private resources and identity providers within custom...

In the earliest days of Amazon Virtual Private Cloud (Amazon VPC), we thought customers would only ever need a single VPC. We’ve learned a lot since then. Today, the AWS Well-Architected Framework des...

Starting today, Amazon CloudFront introduced CloudFront Virtual Private Cloud (VPC) Origins, a new feature that allows users to use CloudFront to deliver content from applications hosted in a VPC…

Orchestrate hybrid workflows accessing private HTTPS endpoints - no more Lambda/SQS workarounds. EventBridge and Step Functions natively support private resources, simplifying cloud modernization.

In this post, we explore how you can use AWS PrivateLink support for Virtual Private Cloud (VPC) resources to facilitate private, secure, and efficient connectivity to shared resources across VPC and…

Subtitle: Fn::GetStackOutput référence les outputs d'autres stacks CloudFormation sans export, même en cross-compte : idéal pour le VPC partagé.

Launching compute instances in the cloud is straightforward, but structuring them within a secure, isolated network requires a solid grasp of AWS networking principles. In this project, Launching VPC Resources, I built a multi-tier network architecture using Amazon Virtual Private Cloud (VPC) and Amazon EC2, establishing granular access controls between public and private resources.

Amazon EventBridge and AWS Step Functions now support integration with private APIs through AWS PrivateLink and Amazon VPC Lattice, enabling secure and simplified connectivity across public and private networks.

AWS announces new integration capabilities for Amazon EventBridge and AWS Step Functions, enabling direct communication with private APIs using AWS PrivateLink and Amazon VPC Lattice. This enhancement...

A beginner-friendly guide to understanding how an EC2 instance becomes reachable over the network, including subnets, route tables, Internet Gateway, security groups, and SSH.

This article explains how to configure domain-level VPC networking in Amazon SageMaker Unified Studio to automatically apply consistent network settings across all projects.

Amazon CloudFront now supports VPC origins, allowing content delivery from applications in private subnets while enhancing security and simplifying operations ...

https://aws.amazon.com/identity/federation/outbound-federation/ now supports Amazon Virtual Private Cloud (VPC) endpoints for the OpenID Connect (OIDC) discovery APIs. You can now access the OIDC discovery metadata and JSON Web Key Set (JWKS) verification key endpoints from within your VPC using https://aws.amazon.com/privatelink/, without requiring traffic to traverse the public internet. IAM outbound identity federation eliminates the need to use long-lived credentials when your AWS workloads access external services. Instead, your workloads request short-lived JSON Web Tokens (JWTs) from AWS Security Token Service (AWS STS). External services verify these tokens using public verification keys and metadata available at OIDC discovery endpoints. Previously, the OIDC discovery endpoints were only reachable over the public internet, so a verifying workload running in a VPC without internet access could not retrieve them. With this launch, you can create an interface VPC endpoint to reach these endpoints privately, keeping the verification key retrieval traffic within the AWS network. This capability helps you meet network security requirements for workloads that operate in VPCs with restricted internet access, while still enabling external services to verify JWTs. This feature is available in all commercial AWS Regions, the AWS GovCloud (US) Regions, and China Regions. There is no additional charge for this feature beyond standard https://aws.amazon.com/privatelink/pricing/. To learn more, see the https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sts_oidc_vpc_endpoint_create.html.