AWS Direct Connect

• Direct Connect establishes private connectivity via leased lines from different vendors to AWS
  
• We need to seek delivery partners according to locations
  

Endpoints

• Overview
  
• Endpoints are of two types
  • interface: a network interface with private ip and dns name will be created in your vpc
  • gateway: A gateway will be attached to vpc where we can forward subnet traffic by routes in routetable
    
• Refer Here for official docs
• Refer Here for the list of aws services for which endpoints can be created

Exercise

• Create an ec2 instance in a vpc in public subnet
• Create a security group which allows 22 port
• Create a nacl there block 22 port
• using VPC Flow log prove that the network is blocked by nacl.