Scope of AWS Entities

AWS has a vast ecosystem of services and entities. There are few intricacies like EC2 Snapshots’ scope is at Region level but where as its cousin EC2 Volume’s scope is at Availability Zone. Below is the list of such tabulation and certainly it is not exhaustive.

AWS Resource Scope Hierarchy Region Hierarchy Sharing
VPC Account Region
Subnet Account > VPC Region > Availability Zone
Route Table Account > VPC Region
ACL Account > VPC Region
Internet Gateway Account > VPC Region
DHCP Option Set Account
Elastic IP Account Region
Endpoints Account > VPC Region
Peering Connection Account > VPC & VPC Region Peer-able to VPC under same account or different Account
Security Groups Account > VPC Region
Customer Gateway Account Region
Virtual Private Gateway Account Region
EC2 – Instance Account > VPC > Subnet Region
EC2 – Images Account Region Sharable to external account(s) or entire public
EC2 – Snapshot Account Region Sharable to external account(s) or entire public
EC2 – Volume Account Region > Availability Zone
EC2 – Reserved Purchases Account Region > Availability Zone > [Specific Instance Size, Type, etc.]
EC2 – Key Pairs Account Region
ELB Account > VPC Region
ENI Account > VPC  > Subnet Region
IAM User Account Global
IAM Role Account Global
IAM Group Account Global
IAM Customer Managed Policy Account Global
IAM Identity Providers Account Global
RDS Instance Account Region
RDS Reserved Purchase Account Region > [Instance Class, AZ]
RDS Snapshot Account Region Sharable to external account(s)
RDS Parameters Account Region
RDS Option Group Account Region
RDS Subnet Group Account > VPC Region
Advertisements
Categories AWS

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s