Hints
- Separate workloads that should be accessible from internet from those that shouldn’t by using public and private subnets
- Use multiple Availability Zones for improved reliability
- You can use VPC Wizard for a quick setup of initial version of VPC
- Use Availability Zones us-west-2a, us-west-2b and us-west-2c - they offer the widest range of available machine types
- Example of a well-design VPC with application layers separated can be found below
