课程: AWS Infrastructure as Code for Software Developers

今天就学习课程吧！

今天就开通帐号，24,700 门业界名师课程任您挑！

Security groups

Security groups - Amazon Web Services (AWS)教程

课程: AWS Infrastructure as Code for Software Developers

开始一个月试用 购买团队方案

Security groups

“

- [Instructor] Another network configuration item that can be easily become a headache is the subject of security groups. Every time you introduce a new resource, be it a server or an AWS service into your BBC, it will likely need some sort of networking permission to operate. This is when a tool like AWS CDK can help you. For example, if we're going to deploy a web server into a private subnet, and in the same stack we have a load balancer going into our public subnets with a listener on port 80, we'll need to open port 80 for the load balancer and it's highly likely that we'll also need to open port 80 for ingress into our web service security group. CloudFormation cannot make this assumptions because each resource is totally independent from one another. But the cloud development kit can analyze what you're doing and make some safe assumptions for you. Of course, you can always override this if it doesn't fit your…

内容