AWS VPC Internet Gateway Purpose

What is the purpose of having an internet gateway within a VPC?

  1. To create a VPN connection to the VPC
  2. To allow communication between the VPC and the internet Correct Answer
  3. To impose bandwidth constraints on internet traffic
  4. To load balance traffic from the internet across Amazon EC2 instances
Answer Correct answer: B — An internet gateway allows communication between the VPC and the internet.

Community Insight

The question tests the fundamental role of an Internet Gateway (IGW) versus other networking components like Virtual Private Gateways (VPG) or Network Load Balancers (NLB). The common trap is confusing the IGW with services that handle encrypted connections or traffic distribution.

An internet gateway is a core VPC component that enables bidirectional communication between instances in a VPC and the public internet. This page clarifies that its sole purpose is routing traffic, not managing VPNs or load balancing.

Candidates often select option A (VPN connection) because they associate 'gateway' with secure tunnels. However, AWS uses a Virtual Private Gateway (VGW) for Site-to-Site VPNs, whereas an Internet Gateway is strictly for public internet access.

Community Discussion (18 comments)

DhavalMakwana 👍 1 Selected: B
Correct answer is B
8479c2f 👍 1 Selected: B
To allow communication between the VPC and the internet
3veryday 👍 1 Selected: B
Internet Gateway(IGW) is gateway btw VPC resource(etc, ec2) <-> internet.
alanb1978 👍 1 Selected: B
VPC eith an Internet connection
Julio19vp 👍 1 Selected: B
La B es correcto
Kostiantyn12 👍 1 Selected: B
B is correct.
Julio19vp 👍 1 Selected: B
La b es correcta
Sir_Kay 👍 1 Selected: B
An internet gateway in a VPC (Virtual Private Cloud) is used to allow bi-directional communication between instances in the VPC and the internet. It is necessary for enabling internet access to and from resources inside the VPC, such as Amazon EC2 instances.
Dipa_2910 👍 1 Selected: B
Option B - to allow communication with VPC and internet
ShaiTay 👍 1 Selected: B
B. To allow communication between the VPC and the internet
GPFT 👍 1 Selected: B
b is correct
Ruffyit 👍 2
B is correct. "An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet."
TheFivePips 👍 17 Selected: B
A. To create a VPN connection to the VPC: VPN connections are typically established using Virtual Private Gateways rather than internet gateways. Internet gateways are not directly involved in VPN connections. B. To allow communication between the VPC and the internet: The primary purpose of an internet gateway (IGW) within a Virtual Private Cloud (VPC) is to enable communication between resources in the VPC and the internet. It serves as a horizontally scaled, redundant component that allows outbound traffic from resources in the VPC to the internet and vice versa. C. To impose bandwidth constraints on internet traffic: Internet gateways do not impose bandwidth constraints on internet traffic. D. To load balance traffic from the internet across Amazon EC2 instances: Load balancing of internet traffic is typically handled by services like Elastic Load Balancing (ELB) rather than the internet gateway.
demo4422 👍 2 Selected: B
B is correct answer "Connect to the internet using an internet gateway" https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
asdfcdsxdfc 👍 1 Selected: B
B looks correct
lunamuller 👍 1 Selected: B
Answer B is Correct.
Anyio 👍 1 Selected: B
The Correct answer is B. https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html
isaphiltrick 👍 10
B is correct. "An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between your VPC and the internet." Reference: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Option B is the correct answer because an Internet Gateway (IGW) is specifically designed to allow communication between resources in a VPC and the internet. It acts as a horizontally scaled, redundant, and highly available network gateway that supports IPv4 and IPv6 traffic. When you attach an IGW to a VPC and configure route tables to direct traffic to it, EC2 instances with public IP addresses can communicate directly with the internet.

Why the Other Options Are Wrong

Option A is incorrect because VPN connections are established using a Virtual Private Gateway (VGW), not an Internet Gateway. Option C is wrong because IGWs do not impose bandwidth constraints; they provide a scalable bridge to the internet. Option D is incorrect because load balancing is handled by Elastic Load Balancing (ELB) services, such as Application Load Balancers or Network Load Balancers, which sit in front of EC2 instances but are distinct from the IGW itself.

Community Comment Notes

The community consensus strongly favors Option B, with multiple users citing the official AWS documentation. As noted by user isaphiltrick, the definition states that an IGW allows communication between the VPC and the internet. User Ruffyit also confirmed this, referencing the same official source. The comments consistently highlight that while VGWs handle VPNs, IGWs handle general internet connectivity.

Official Reference

Exam Strategy

Always distinguish between 'Internet' and 'Private' gateways. Remember that Internet Gateways provide public internet access, while Virtual Private Gateways are used for connecting your VPC to on-premises networks via VPN. Confusing these two is a frequent exam pitfall.

Frequently Asked Questions

What is the difference between an Internet Gateway and a Virtual Private Gateway?

An Internet Gateway connects a VPC to the public internet for HTTP/HTTPS traffic. A Virtual Private Gateway connects a VPC to an on-premises network via a Site-to-Site VPN.

Can an Internet Gateway load balance traffic across EC2 instances?

No. Load balancing is performed by Elastic Load Balancing (ELB) services. An Internet Gateway only routes traffic to and from the internet.

More CLF-C02 FAQ →

Related Analysis

Practice All CLF-C02 Questions

Access 120 questions with complete answers and detailed explanations.

View Full CLF-C02 Practice Test →

← Back to CLF-C02 Study Guide