Amazon Virtual Private Cloud (Amazon VPC) lets you launch AWS resources in a virtual network that you create.
A VPC is a network environment that contains:
With Amazon VPC:
The control access in each subnet (of Amazon EC2 instances, container ??) is made via
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html
Example: to allows your Docker containers to receive traffic on port 8080 from the Internet through a Network Load Balancer.
In order to access the public Internet, your VPC must have an Internet gateway—a virtual router that connects your VPC to the Internet.
This is also needed to access Aws Internet resources, such as Amazon DynamoDB.