Ravi Sir's Cards › AWS
Inspection VPC pattern
This revision card explains Inspection VPC pattern. It starts from the need that east-west and egress bypass leave blind spots. It describes hub inspection VPC with Network Firewall endpoints; spoke route through it. The how-to section notes design routes , then deploy NF , then Suricata/domain lists , then prove deny , then watch cost. An example on the card is kenji Watanabe deletes lab NF the same day to stop hourly bills.
Read card text
What this card says
Why do we need it?
East-west and egress bypass leave blind spots.
What is it?
Hub inspection VPC with Network Firewall endpoints; spoke route through it.
inspection VPC
How to do it
Design routes → deploy NF → Suricata/domain lists → prove deny → watch cost.
Example
Kenji Watanabe deletes lab NF the same day to stop hourly bills.