World map

 

BM

World A3: The Mall's Roads

VPC: your own corner of the mall

You will learn: what a VPC is, and how its block of addresses works.

Checked with AWS 2026-11 on 1 Nov 2026

The problem

Kedai Kancil wants servers in the cloud. Thousands of other shops rent in the same mall. How do you keep your units apart?

Watch

A VPC: Virtual Private Cloud: your own fenced plot of the mall's land. Your servers live inside it. is your fenced plot in the mall. Your servers and databases live inside it. Some services live outside. Sort them.

Drag a card into a box. Or tap the card, then tap the box.

      Watch

      Your plot gets a block of addresses, written as a CIDR block: A block of addresses, like 10.0.0.0/16. A smaller number after the slash means a bigger block.. 10.0.0.0/16 has 65,536 addresses. A smaller number after the slash means a bigger block. Which is biggest?

      Try it

      This plot is far too big. Make the VPC a /16. Then give each wing one public row.

      Give each row of units its own block of addresses. Nothing may overlap.

      VPC (the mall's land)

      /8 is too big. A VPC is /16 to /28.

      The brief

      • Public subnet (faces the street): 2, one per zone.
      Address map: 10.0.0.0 to 10.0.0.255
        Public subnet (faces the street) · ap-southeast-5a

        No subnet yet. Pick a size.

        Public subnet (faces the street) · ap-southeast-5b

        No subnet yet. Pick a size.

        Check

        The AWS CLI makes a VPC too. Here is the official example’s answer, cut short. Tap the line with the new VPC’s id.

        Tap the line with the new VPC's id.

        0 of 1 found

        Check

        Good plot habits, or risky? Swipe right for good.

        Swipe right for good, left for needs work. Or use the buttons.

        1 / 4

        Use a private range like 10.0.0.0/16

        You did it!

        You can now fence your own plot: a VPC with its address block.

        Go deeper (optional)

        Each Region gives you a default VPC, with a public row in every wing. It is handy for practice. A VPC has no charge, but some parts inside it do. You meet those next.

        Real rep (optional): in a test account, open the VPC page. Find your default VPC and its CIDR. Create nothing yet.