{"id":279,"date":"2023-06-24T09:54:13","date_gmt":"2023-06-24T00:54:13","guid":{"rendered":"http:\/\/tech.itdesk.co.kr\/?p=279"},"modified":"2023-06-24T09:54:26","modified_gmt":"2023-06-24T00:54:26","slug":"aws-%eb%84%a4%ed%8a%b8%ec%9b%8c%ed%81%ac-%ec%84%9c%eb%b9%84%ec%8a%a4-basic-%ec%9a%a9%ec%96%b4","status":"publish","type":"post","link":"https:\/\/iwgh.duckdns.org\/?p=279","title":{"rendered":"AWS \ub124\ud2b8\uc6cc\ud06c \uc11c\ube44\uc2a4 Basic \uc6a9\uc5b4"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

– \uac00\uc7a5 \uae30\ubcf8\uc801\uc73c\ub85c \uc54c\uc544\uc57c \ud560 network \uc11c\ube44\uc2a4<\/h4>\n\n\n\n

– VPC : \uaca9\ub9ac\ub41c \uac00\uc0c1 \ub124\ud2b8\uc6cc\ud06c, \ubaa8\ub4e0 \uc0ac\uc6a9\uc790 \uc11c\ube44\uc2a4\ub294 VPC \ub0b4\uc758 \ub124\ud2b8\uc6cc\ud06c\ub97c \uc0ac\uc6a9, \uae30\ubcf8 \ub9ac\uc804\ub2f9 5\uac1c \uac1c\uc218\uc81c\ud55c.
– \uc11c\ube0c\ub137 : VPC\uc544\ub798 \uc0dd\uc131\ub418\ub294 \ub124\ud2b8\uc6cc\ud06c \ub300\uc5ed, IGW \uc5f0\uacb0\uacfc route \uc124\uc815\ub530\ub77c private\/public\ub85c \uad6c\ubd84.
– NACL : IP\/PORT\/Protocol \ubca0\uc774\uc2a4 \uae30\ubcf8 \ubcf4\uc548\ud234(\ubc29\ud654\ubcbd), Default in\/out \uc804\uccb4 \ud5c8\uc6a9, \uc0c1\ud0dc\ube44\uc800\uc7a5
– \ubcf4\uc548\uadf8\ub8f9 : \uac01 \uc778\uc2a4\ud134\uc2a4\/RDS\/EFS\ub4f1 \uc11c\ube44\uc2a4 \uac1c\uccb4\uc5d0 \uc801\uc6a9\ub418\ub294 \ubcf4\uc548\ud234(\ubc29\ud654\ubcbd), Default OUT \uc804\uccb4\ud5c8\uc6a9, IN \uc804\uccb4 \ucc28\ub2e8, \uc0c1\ud0dc\uc800\uc7a5
– IGW : internet gateway \uc778\ud130\ub137\uc73c\ub85c \uc5f0\uacb0\uac00\ub2a5\ud558\uac8c \ud574\uc8fc\ub294 \ud1b5\ub85c. \uc11c\ube0c\ub137\uc5d0\uc11c \ub77c\uc6b0\ud305 \uc124\uc815\uc2dc \uc778\ud130\ub137\uac00\ub2a5.
– route53 : AWS DNS \uc11c\ube44\uc2a4<\/p>\n\n\n\n

<\/p>\n\n\n\n

– \ubd84\ub958\uc5d0 \ub530\ub978 \ub124\ud2b8\uc6cc\ud06c \uc11c\ube44\uc2a4\ub4e4.<\/h4>\n\n\n\n

Network \uae30\ubc18: Amazon VPC<\/strong>, AWS Transit Gateway, AWS PrivateLink<\/p>\n\n\n\n

\ud558\uc774\ube0c\ub9ac\ub4dc \uc5f0\uacb0: AWS Direct Connect, AWS Site-to-Site VPN, AWS Client VPN, AWS Cloud WAN<\/p>\n\n\n\n

\uc5e3\uc9c0 \ub124\ud2b8\uc6cc\ud0b9: Amazon CloudFront, Amazon Route 53<\/strong>, AWS Global Accelerator<\/p>\n\n\n\n

\uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub124\ud2b8\uc6cc\ud0b9: AWS App Mesh, Amazon API Gateway, AWS Cloud Map<\/p>\n\n\n\n

\ub124\ud2b8\uc6cc\ud0b9 \ubcf4\uc548: AWS Shield, AWS WAF, AWS Network Firewall<\/strong>, AWS Firewall Manager<\/p>\n\n\n\n

<\/p>\n\n\n\n

– \uac01\uc11c\ube44\uc2a4\ubcc4 \uac04\ub2e8 \uc815\ub9ac<\/h4>\n\n\n\n

\ub124\ud2b8\uc6cc\ud06c \uae30\ubc18 (\ud074\ub77c\uc6b0\ub4dc \uc11c\ube44\uc2a4\uc758 \uae30\ubcf8\uc801\uc778 \ub124\ud2b8\uc6cc\ud06c)<\/p>\n\n\n\n

 – VPC : \uaca9\ub9ac\ub41c \uac00\uc0c1\ub124\ud2b8\uc6cc\ud06c \ud2b8\ub798\ud53d\ubaa8\ub2c8\ud130\ub9c1(VPC flow log, CloudWatch, Traffic Mirroring) \ud3ec\ud568<\/p>\n\n\n\n

 – Transit Gateway : VPC\uac04\uc5d0 \uc5f0\uacb0 \ubc0f \ud53c\uc5b4\ub9c1 \uad00\ub9ac<\/p>\n\n\n\n

 – PrivateLink : \ub9ac\uc804\ub0b4 \ub610\ub294 \ub2e4\ub978 VPC, \uc628\ud504\ub808\ubbf8\uc2a4 \uac04\uc5d0 \ud504\ub77c\uc774\ube57 \uc5f0\uacb0 \uc124\uc815<\/p>\n\n\n\n

\ud558\uc774\ube0c\ub9ac\ub4dc \uae30\ubc18 (\uc628\ud504\ub77c\ubbf8\uc2a4\uc640\uc758 \uc5f0\uacb0\uad00\ub828)<\/p>\n\n\n\n

 – Direct Connect : \ub370\uc774\ud130\uc13c\ud130(\uc628\ud504\ub77c\ubbf8\uc2a4)\uc640\uc758 \ud504\ub77c\uc774\ube57 \uc5f0\uacb0<\/p>\n\n\n\n

 – Cloud WAN : \uc0ac\ubb34\uc2e4, \ub370\uc774\ud130\uc13c\ud130, VPC \uc5f0\uacb0\uc744 \uc704\ud55c \uc911\uc559\ub300\uc2dc\ubcf4\ub4dc. VPC\uc640 \uc628\ud504\ub808\ubbf8\uc2a4\uc5f0\uacb0(\ud1b5\ud569???)<\/p>\n\n\n\n

 – Client VPN : \ud300 \uc6d0\uaca9 \uc561\uc138\uc2a4\ub97c \uc704\ud55c VPN (\uac1c\ubcc4 clients \uc6a9???)<\/p>\n\n\n\n

 – Site-to-Site VPN : \uc6d0\uaca9\uc0ac\ubb34\uc2e4\uc744 AWS\uc5d0 \uc5f0\uacb0<\/p>\n\n\n\n

\uc5e3\uc9c0 \ub124\ud2b8\uc6cc\ud0b9 (end user\uc758 \ube60\ub978 \uc811\uc18d, \uc5b4\ub514\uc11c\ub098 \ube60\ub978 \uc811\uadfc. 10ms\uc774\ud558 \uc751\ub2f5\uc2dc\uac04)<\/p>\n\n\n\n

 – CloudFront : \uc9e7\uc740 \uc9c0\uc5f0\uc2dc\uac04, \ub192\uc740 \uc804\uc1a1\uc18d\ub3c4\uc758 \ub370\uc774\ud130, \ubbf8\ub514\uc5b4, APP API\ub97c \uc81c\uacf5<\/p>\n\n\n\n

 – Route53 : \ubd84\uc0b0\ucc98\ub9ac \uac00\ub2a5\ud55c DNS \uc2dc\uc2a4\ud15c.<\/p>\n\n\n\n

 – Global Accelerator : \uc0ac\uc6a9\uc790\uc5d0\uc11c \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158\uae4c\uc9c0\uc758 \ud2b8\ub798\ud53d \ucd5c\uc801\ud654. (\uc555\ucd95? dedup? \uac00\uc18d\uce74\ub4dc\/\uc571?)<\/p>\n\n\n\n

=> \uc5e3\uc9c0\uc5d0 \uc0c1\uc8fc\ud558\ub294 \ubcf4\uc548 Shield Standard(DDOS\uacf5\uaca9\/\uc6f9\uacf5\uaca9 \ubc29\uc5b4), WAF(\uc6f9\ubc29\ud654\ubcbd? application firewall)<\/p>\n\n\n\n

\uc560\ud50c\ub9ac\ucf00\uc774\uc158 :ELB, Global accelerator \ub4f1\uacfc \ud568\uaed8 \uc5d0\ud50c\ub9ac\ucf00\uc774\uc158 \ub124\ud2b8\uc6cc\ud0b9 \uc694\uad6c \ud574\uacb0<\/p>\n\n\n\n

 – API Gateway : API \uc0dd\uc131\/\uc720\uc9c0\/\ubcf4\ud638<\/p>\n\n\n\n

 – APP Mesh : \ucee8\ud14c\uc774\ub108, \ub9c8\uc774\ud06c\ub85c\uc11c\ube44\uc2a4 \uc5f0\uacb0<\/p>\n\n\n\n

 – Cloud Map : \ucd5c\uadfc \uc561\uc138\uc2a4 \uac80\uc0c9<\/p>\n\n\n\n

\ub124\ud06c\uc6cc\ud06c\ubcf4\uc548 :<\/p>\n\n\n\n

 – Firewall Manager : \ubc29\ud654\ubcbd \uaddc\uce59\uc744 \uc911\uc559\uc5d0\uc11c \uad00\ub9ac<\/p>\n\n\n\n

 – Shield : DDOS \uacf5\uaca9\uc73c\ub85c\ubd80\ud130 \ubcf4\ud638<\/p>\n\n\n\n

 – WAF : \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubcf4\ud638<\/p>\n\n\n\n

 – Network Firewall : VPC\uc5d0\uc11c \ub124\ud2b8\uc6cc\ud06c\ubcf4\uc548 \uc561\uc138\uc2a4<\/p>\n","protected":false},"excerpt":{"rendered":"

– \uac00\uc7a5 \uae30\ubcf8\uc801\uc73c\ub85c \uc54c\uc544\uc57c \ud560 network \uc11c\ube44\uc2a4 – VPC : \uaca9\ub9ac\ub41c \uac00\uc0c1 \ub124\ud2b8\uc6cc\ud06c, \ubaa8\ub4e0 \uc0ac\uc6a9\uc790 \uc11c\ube44\uc2a4\ub294 VPC \ub0b4\uc758 \ub124\ud2b8\uc6cc\ud06c\ub97c \uc0ac\uc6a9, \uae30\ubcf8 \ub9ac\uc804\ub2f9 5\uac1c \uac1c\uc218\uc81c\ud55c.– \uc11c\ube0c\ub137 […]<\/p>\n","protected":false},"author":1,"featured_media":280,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[18,1],"tags":[54,56,57,25,55],"class_list":["post-279","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-small","category-tech","tag-aws","tag-basic","tag-concept","tag-network","tag-vpc"],"_links":{"self":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=279"}],"version-history":[{"count":1,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/279\/revisions"}],"predecessor-version":[{"id":281,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/posts\/279\/revisions\/281"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=\/wp\/v2\/media\/280"}],"wp:attachment":[{"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/iwgh.duckdns.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}