How cloud resources connect.
WHAT A VIRTUAL NETWORK IS
An isolated network within the provider's infrastructure, which you define.
WHAT YOU CONFIGURE
Address ranges Subnets What may communicate with what What is reachable from the internet
WHY IT MATTERS
Default configurations are frequently more open than intended.
WHAT TO ESTABLISH
Which resources need to be public Which should be reachable only internally
THE DATABASE POINT
A database should almost never be reachable from the internet.
That is a common and serious misconfiguration.
WHAT SECURITY GROUPS OR RULES DO
Control traffic to each resource.
WHAT TO APPLY
The minimum access necessary, as with any network.
WHAT TO CHECK AFTER CREATING ANYTHING
What is actually exposed.
WHAT TO AVOID
Opening access broadly to make something work Leaving defaults unexamined
WHAT TO DOCUMENT
Your intended design, so drift is visible.
WHAT TO REVIEW
Exposure, periodically.
