From the course: AWS Infrastructure as Code for Software Developers

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Security groups

Security groups - Amazon Web Services (AWS) Tutorial

From the course: AWS Infrastructure as Code for Software Developers

Start my 1-month free trial

Security groups

- [Instructor] Another network configuration item that can be easily become a headache is the subject of security groups. Every time you introduce a new resource, be it a server or an AWS service into your BBC, it will likely need some sort of networking permission to operate. This is when a tool like AWS CDK can help you. For example, if we're going to deploy a web server into a private subnet, and in the same stack we have a load balancer going into our public subnets with a listener on port 80, we'll need to open port 80 for the load balancer and it's highly likely that we'll also need to open port 80 for ingress into our web service security group. CloudFormation cannot make this assumptions because each resource is totally independent from one another. But the cloud development kit can analyze what you're doing and make some safe assumptions for you. Of course, you can always override this if it doesn't fit your…

Contents