Public Subnet vs Private Subnet - Routing and Internet Gateway - AWS Certification Cheat Sheet

Let’s get a quick overview of Public Subnet vs Private Subnet from an AWS certification perspective. We will look at important certification questions regarding Public Subnet vs Private Subnet.

You will learn

  • What are Public Subnets and Private Subnet?
  • When do we use Public Subnet vs Private Subnet?
  • How is Public Subnet different from Private Subnet?
  • What is an Internet Gateway?
  • Why is Internet Gateway Important?
  • What is Routing?
  • What are Route Tables?
  • How does Routing happen inside AWS?

Public Subnet

In a Public Subnet:

  • Communication is allowed from subnet to internet
  • Communication is allowed from internet to subnet

Routing on the internet

Let’s first understand how routing works on the internet.

You have an IP address of a website you want to visit. There is no direct connection from your computer to the website.

Internet is actually a set of routers routing traffic. Each router has a set of rules that help it decide the path to the destination IP address.

Routing inside AWS

How does routing work inside AWS?

In AWS, route tables are used for routing. Route tables can be associated with VPCs and subnets. Each route table consists of a set of rules called routes:

  • Each route or routing rule has a destination and target
  • What CIDR blocks (range of addresses) should be routed to which target resource?
Destination Target Local igw-1234567

In the above configuration:

  • Rule 1 - Route requests to VPC CIDR ( to to local resources within the VPC
  • Rule 2 - Route all other IP addresses ( to internet (internet gateway)

Let’s consider a couple of examples:

What happens if I search for an address

  • Two destinations match - ( to and
  • The most specific rule wins. is more specific
  • Result : Routing to a local resource

What happens if I search for an address

  • One destination match -
  • Result : Routing to internet

Remember: The most specific matching route wins.

Public Subnet vs Private Subnet

How do public subnets connect to the internet?

Let’s examine the route table of a public subnet:

Name Destination Target Explanation
RULE 1 Local Local routing
RULE 2 igw-1234567 Internet routing

Any subnet which has a route to an internet gateway is called a public subnet.

An Internet Gateway enables internet communication for subnets.

Any subnet which DOES NOT have route to an internet gateway is called a private subnet

An Internet Gateway:

  • Sits between subnet (VPC) resources and internet
  • One to one mapping with a VPC
  • Supports IPv4 and IPv6
  • Translate private IP address to public IP address and vice-versa
  • DHCP option set: Assign custom host names and IP addresses to EC2 instances

Certification - Recommended Reading

Cloud Certifications - AWS, Azure and Google Cloud - Top 8 FAQ For Me

Google Cloud For Beginners - How to choose a Database Service?

Teaching Cloud Certifications - Top 6 Learnings

Google Cloud For Beginners - How to choose a Compute Service?

Important Kubernetes Concepts Made Easy

Introduction to Google Cloud - For AWS Professionals

Getting Started with Docker - 5 Easy Steps

GCP PubSub - GCP Certification Cheat Sheet

GCP IAM - GCP Certification Cheat Sheet

GCP App Engine - GCP Certification Cheat Sheet


Congratulations on reading this article!

Wondering what to learn next?


Keep Learning Every Day

Check Out Our Amazing ROADMAPS