...
- One private subnet in each of the sic six Availability Zones available in us-east-1.
- One NAT Gateway in each Availability Zone. Each private subnet routes internet-bound traffic to the NAT Gateway in the same Available Zone, providing maximal resiliency.
- Direct Connect connectivity to private and public campus networks, and to private Cornell VNets in Azure
- Connectivity to all Cornell Standard VPCs in AWS, without leaving the us-east-1 AWS Region.
- Gateway endpoints for S3 and Dynamo DB reside in the VPC making VPC communication with those services quick and private.
- If you have need for other AWS service endpoints deployed to the Shared VPC, please contact Cloud Support.
- A slightly modified version of the Baseline AWS Network ACL is applied to all private subnets. (The single change is that the inbound rule allowing traffic to port 22 from the internet is removed. Inbound traffic on port 22 is still allowed from Cornell private and public networks.)
...