AWS VPC Internet Gateway Purpose

CLF-C02 By islever Editorial Last updated

Identify AWS network services.

Short answer

B An internet gateway allows communication between the VPC and the internet.

Question

What is the purpose of having an internet gateway within a VPC?
  1. To create a VPN connection to the VPC
  2. To allow communication between the VPC and the internet Correct Answer
  3. To impose bandwidth constraints on internet traffic
  4. To load balance traffic from the internet across Amazon EC2 instances

Key Takeaways

The question tests the fundamental role of an Internet Gateway (IGW) versus other networking components like Virtual Private Gateways (VPG) or Network Load Balancers (NLB). The common trap is confusing the IGW with services that handle encrypted connections or traffic distribution.

An internet gateway is a core VPC component that enables bidirectional communication between instances in a VPC and the public internet. This page clarifies that its sole purpose is routing traffic, not managing VPNs or load balancing.

Common mistake: Candidates often select option A (VPN connection) because they associate 'gateway' with secure tunnels. However, AWS uses a Virtual Private Gateway (VGW) for Site-to-Site VPNs, whereas an Internet Gateway is strictly for public internet access.

Expert Analysis

Why the Answer Is Correct

Option B is the correct answer because an Internet Gateway (IGW) is specifically designed to allow communication between resources in a VPC and the internet. It acts as a horizontally scaled, redundant, and highly available network gateway that supports IPv4 and IPv6 traffic. When you attach an IGW to a VPC and configure route tables to direct traffic to it, EC2 instances with public IP addresses can communicate directly with the internet.

Why the Other Options Are Wrong

Option A is incorrect because VPN connections are established using a Virtual Private Gateway (VGW), not an Internet Gateway. Option C is wrong because IGWs do not impose bandwidth constraints; they provide a scalable bridge to the internet. Option D is incorrect because load balancing is handled by Elastic Load Balancing (ELB) services, such as Application Load Balancers or Network Load Balancers, which sit in front of EC2 instances but are distinct from the IGW itself.

Community Comment Notes

The community consensus strongly favors Option B, with multiple users citing the official AWS documentation. As noted by user isaphiltrick, the definition states that an IGW allows communication between the VPC and the internet. User Ruffyit also confirmed this, referencing the same official source. The comments consistently highlight that while VGWs handle VPNs, IGWs handle general internet connectivity.

Official Reference

https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html

This link opens the official vendor documentation in a new tab.

Exam Strategy

Always distinguish between 'Internet' and 'Private' gateways. Remember that Internet Gateways provide public internet access, while Virtual Private Gateways are used for connecting your VPC to on-premises networks via VPN. Confusing these two is a frequent exam pitfall.

Frequently Asked Questions

What is the difference between an Internet Gateway and a Virtual Private Gateway?

An Internet Gateway connects a VPC to the public internet for HTTP/HTTPS traffic. A Virtual Private Gateway connects a VPC to an on-premises network via a Site-to-Site VPN.

Can an Internet Gateway load balance traffic across EC2 instances?

No. Load balancing is performed by Elastic Load Balancing (ELB) services. An Internet Gateway only routes traffic to and from the internet.

More CLF-C02 FAQ →

Discussion 18 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 18

  1. TheFivePips 👍 17 Answered B
    A. To create a VPN connection to the VPC: VPN connections are typically established using Virtual Private Gateways rather than internet gateways. Internet gateways are not directly involved in VPN connections. B. To allow communication between the VPC and the internet: The primary purpose of an internet gateway (IGW) within a Virtual Private Cloud (VPC) is to enable communication between resources in the VPC and the internet. It serves as a horizontally scaled, redundant component that allows outbound traffic from resources in the VPC to the internet and vice versa. C. To impose bandwidth constraints on internet traffic: Internet gateways do not impose bandwidth constraints on internet traffic. D. To load balance traffic from the internet across Amazon EC2 instances: Load balancing of internet traffic is typically handled by services like Elastic Load Balancing (ELB) rather than the internet gateway.
  2. isaphiltrick 👍 10
    B is correct. "An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet." Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
  3. Ruffyit 👍 2
    B is correct. "An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet."
  4. demo4422 👍 2 Answered B
    B is correct answer "Connect to the internet using an internet gateway" https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
  5. Sir_Kay 👍 1 Answered B
    An internet gateway in a VPC (Virtual Private Cloud) is used to allow bi-directional communication between instances in the VPC and the internet. It is necessary for enabling internet access to and from resources inside the VPC, such as Amazon EC2 instances.
Show 13 more comments
  1. Anyio 👍 1 Answered B
    The Correct answer is B. https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
  2. 3veryday 👍 1 Answered B
    Internet Gateway(IGW) is gateway btw VPC resource(etc, ec2) <-> internet.
  3. ShaiTay 👍 1 Answered B
    B. To allow communication between the VPC and the internet
  4. 8479c2f 👍 1 Answered B
    To allow communication between the VPC and the internet
  5. Dipa_2910 👍 1 Answered B
    Option B - to allow communication with VPC and internet
  6. alanb1978 👍 1 Answered B
    VPC eith an Internet connection
  7. lunamuller 👍 1 Answered B
    Answer B is Correct.
  8. DhavalMakwana 👍 1 Answered B
    Correct answer is B
  9. Julio19vp 👍 1 Answered B
    La B es correcto
  10. Julio19vp 👍 1 Answered B
    La b es correcta
  11. asdfcdsxdfc 👍 1 Answered B
    B looks correct
  12. Kostiantyn12 👍 1 Answered B
    B is correct.
  13. GPFT 👍 1 Answered B
    b is correct

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Which migration strategies move a cloud-incompatible CMS with least effort?

S-grade

Launching Third-Party IDS in AWS

S-grade

Which AWS Support Plan Offers API Access Most Cost-Effectively?

S-grade

S3 Express One Zone for Single-Digit Millisecond Latency

S-grade

Practice All CLF-C02 Questions

Access 120 questions with complete answers and detailed explanations.

View Full CLF-C02 Practice Test →

← Back to CLF-C02 Study Guide