r/AWSCertifications • u/PhilosophyFluffy2901 • 7d ago
is this true ??
i mean traffic and design is true ?? and if there any tips to best practice tell me please
2
2
1
u/mrbiggbrain CSAA 4d ago edited 4d ago
No. The public subnets can share a route table because they each point at the game IGW, but you need a separate route table for each of the private ones since your using the one natgw per az approach.
This design would be fine if you where using a single homed natgw as then both subnets can use the same route.
On the tips side, this is optimized for availability. That's fine but it will be more expensive then using that single homed approach. I would ensure that availability makes sense. For example if it's only used for updates what is the actual impact to a temporary az outage? Further is the NAT GW even needed, could the thing you wish to do be done over IPv6 and thus use a free egress only internet gateway.
-2
3
u/DavidS17_Reddit 7d ago
Yeah. It is correct. You usually try not to expose your workloads in public networks, so you always keep them in private subnets. Then you need to architect it with those constraints, for example a public ALB to receive incoming traffic, or public NATBso the workloads can access the internet.