Start with your VPC network (e.g., 10.0.0.0/16).
Decide how many subnets you need.
Borrow bits from the host portion to create smaller subnets.
Divide the network into subnet ranges (CIDR blocks).
Check usable IPs in each subnet (subtract reserved addresses).
Internet gateway resources in a public subnet connect to and from the internet.
NAT gateway resources in a private subnet access the internet outbound only, but blocks inbound traffic from the internet.
The default VPC is a ready-made network AWS creates in each region, so you can launch instances quickly without custom setup. It comes with default subnets, route tables, and an internet gateway.
it is an IP address that is not the network ID or broadcast address, and can be assigned to a device.
Eg: In subnet 192.168.1.0/24
Network ID: 192.168.1.0
Broadcast: 192.168.1.255
Valid host IPs: 192.168.1.1 to 192.168.1.254
a subnet mask marks the nw bits with 1's and the host bits with 0's. the 1's part is the network ID and the 0's part is the host ID.