NAT Gateway: Your VPC's Outbound-Only Internet Door
A NAT Gateway is a one-way door for your private cloud resources. It lets instances in private subnets initiate outbound traffic to the internet—like for updates or API calls—but blocks unsolicited inbound connections.
A NAT Gateway is your VPC's secure, one-way exit to the internet. It lets resources in private subnets—like backend servers or databases—initiate outbound connections to download updates or call APIs, while blocking any unsolicited inbound traffic. The common footgun is confusing it with an Internet Gateway, which provides two-way internet access for resources in public subnets. A NAT Gateway is strictly for outbound-only traffic from private subnets.
Read the original → docs.aws.amazon.com
- #cloud
- #aws
- #networking
- #vpc
- #security
Get five bites like this every day.
Tezvyn delivers a daily feed of 60-second tech bites with quizzes to lock in what you learn.