reference deployment

Amazon Virtual Private Cloud on AWS

Modular, scalable networking foundation for AWS Cloud infrastructures

This Amazon Virtual Private Cloud (Amazon VPC) Quick Start provides a networking foundation based on AWS best practices for your AWS Cloud infrastructure. It builds an Amazon VPC with public and private subnets where you can launch AWS services and other resources.

Use this Quick Start as a building block for your own deployments. You can scale it up or down and add infrastructure components and software layers as needed.

This Quick Start was developed by AWS.


AWS Service Catalog administrators can add this architecture to their own catalog.  

  •  What you'll build
  • This Quick Start sets up the following:

    • A highly available architecture that spans two to four Availability Zones.
    • A VPC configured with public and private subnets, according to AWS best practices, to provide you with your own virtual network on AWS. The VPC provides Domain Name System (DNS) resolution.
    • In the public subnets:
      • Managed network address translation (NAT) gateways to allow outbound internet access for resources in the private subnets.
      • Dedicated custom network access control lists (ACLs) for each Availability Zone.
      • A single routing table (not shown) because the public subnets all use the same internet gateway as the sole route to communicate with the internet.
    • In the private subnets:
      • Dedicated custom network ACLs for each Availability Zone.
      • An independent routing table (not shown) for each private subnet configured to control the flow of traffic within and outside the VPC.
      • Spare capacity for adding subnets to support your environment as it grows.
    • A VPC gateway endpoint for Amazon Simple Storage Service (Amazon S3). This endpoint provides a secure, reliable connection to Amazon S3 without requiring an internet gateway, NAT gateway, or virtual private gateway.



  •  How to deploy
  • To deploy this Quick Start, follow the instructions in the deployment guide, which includes these steps.

    1. Sign in to your AWS account. If you don't have an account, sign up at
    2. Launch the AWS Quick Start. The stack takes about 5 minutes to deploy. Before you create the stack, choose the AWS Region from the top toolbar.
    3. Add other services or applications.

    To customize your deployment, you can choose the number of Availability Zones you want to use for resource distribution, reconfigure the subnet segmentation and sizing for the VPC, and create additional private subnets with custom network ACLs.

    Amazon may share user-deployment information with the AWS Partner that collaborated with AWS on this solution.  

  •  Costs and licenses
  • You are responsible for the costs of using AWS services while running this reference deployment. There are no additional costs or licensing requirements for using this Quick Start.

    The AWS CloudFormation template for this Quick Start includes configuration parameters that you can customize. Some of these settings, such as instance type, affect the cost of deployment. For cost estimates, refer to the pricing pages for each AWS service you use, including Amazon VPC pricing. Prices are subject to change.

    Tip: After you deploy the Quick Start, create AWS Cost and Usage Reports to track associated costs. These reports deliver billing metrics to an Amazon Simple Storage Service (Amazon S3) bucket in your account. They provide cost estimates based on usage throughout each month and aggregate the data at the end of the month. For more information about the report, refer to What are AWS Cost and Usage Reports?