define network
- by defautl every subnet is private
- add NAT to public subnet
- attach IGW to public subnet
- enable auto elastic ip assignment for public subnet
- attach route table to subnet
- define rules to forwrads packets
- define distinct route tables for different subnets
- add route table IGW entry to allow internet access for public subnets
- this component will allow private networks to access internet
- this component is enabling internet traffic for public subnets
actual machine
- firewall
- provide inbound/outbound rules for EC2 instances, can be based on address or on security group
- can be defined for portocol or specific port