8 of 8 cards free · no sign-in needed
Interface endpoint = an ENI with a private IP (PrivateLink) for most services. Gateway endpoint = a route-table target for S3 and DynamoDB only.
A one-to-one private connection between two VPCs. It is non-transitive — A↔B and B↔C does not give A↔C; a full mesh needs n(n-1)/2 connections.
A hub that connects many VPCs and on-premises networks through a single gateway, replacing complex peering meshes with hub-and-spoke routing.
An encrypted IPsec tunnel between your network and AWS over the public internet — quick to set up, variable performance.
A dedicated private physical connection from your data centre to AWS — consistent performance and lower data-transfer cost; not over the internet.
VPN: fast to deploy, encrypted, internet-dependent. Direct Connect: dedicated, consistent, higher bandwidth; combine the two for encrypted private links.
Connecting n VPCs in a full mesh needs n(n-1)/2 peering connections — growth is why Transit Gateway is preferred at scale.
Sign in (free) to flip every card, mark what you know, and pick up exactly where you left off.
After sign-in: Space flip · ←→ navigate · K knew it · S skip