• Separate workloads that should be accessible from internet from those that shouldn’t by using public and private subnets
  • Use multiple Availability Zones for improved reliability
  • You can use VPC Wizard for a quick setup of initial version of VPC
  • Use Availability Zones us-west-2a, us-west-2b and us-west-2c - they offer the widest range of available machine types
  • Example of a well-design VPC with application layers separated can be found below