Subnets and network access control lists

Subnets and network access control lists

1. Network hardening

   • Network access control list
     • Network ACL
       • rules
         • in
         • out
       • deference
       • Stateless
         • Remembers nothing
           • Cheks avery single packet that crosses its border
       • default
         • allows all traffic
   • Security Groups
     • Stateful
       • kinf of a memory when it comes to who to allow
         • in or out

2. Application security

3. Authentication and authorization

4. Distributed denial of service prevention

5. Data integrity

6. Encryption

7. Global networking

   • Route 53
     • Domain name services or DNS
     • Routing policies
       • Latency-based routing
       • Geolocation DNS
         • Direct traffic based on where the customer is located
       • Geoproximity routing
       • Weighted roung robin
     • Buy and manager domains on AWS

8. Deploy static assets in CloudFront

   • Different Regions
     • Same acess, but closer to then

9. Which statement best describes security groups?

   • They are stateful and deny all inbound traffic by default.