Ravi Sir's Cyber Security Cards › Interview Cards
How do you design a simple three-tier VPC story?
How do you design a simple three-tier VPC story? Public subnet for the load balancer/bastion, private subnets for app and database, NAT for outbound patching. The warehouse database sits in a private subnet with no public IP, reachable only from the app tier. “Three tiers, security groups between th
Read card text
What this card says
Short answer
Public subnet for the load balancer/bastion, private subnets for app and database, NAT for outbound patching.
Example
The warehouse database sits in a private subnet with no public IP, reachable only from the app tier.
Say it in the interview
“Three tiers, security groups between them, and the database never gets a public IP.”
Why it matters
Keeping the database off the internet stops the most common cloud breach.
Learn more in the lesson: 46.6 AWS Cloud Security Interview Questions