AWS VPC Internet Gateway Purpose
What is the purpose of having an internet gateway within a VPC?
Community Insight
The question tests the fundamental role of an Internet Gateway (IGW) versus other networking components like Virtual Private Gateways (VPG) or Network Load Balancers (NLB). The common trap is confusing the IGW with services that handle encrypted connections or traffic distribution.
An internet gateway is a core VPC component that enables bidirectional communication between instances in a VPC and the public internet. This page clarifies that its sole purpose is routing traffic, not managing VPNs or load balancing.
Candidates often select option A (VPN connection) because they associate 'gateway' with secure tunnels. However, AWS uses a Virtual Private Gateway (VGW) for Site-to-Site VPNs, whereas an Internet Gateway is strictly for public internet access.
Community Discussion (18 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Option B is the correct answer because an Internet Gateway (IGW) is specifically designed to allow communication between resources in a VPC and the internet. It acts as a horizontally scaled, redundant, and highly available network gateway that supports IPv4 and IPv6 traffic. When you attach an IGW to a VPC and configure route tables to direct traffic to it, EC2 instances with public IP addresses can communicate directly with the internet.Why the Other Options Are Wrong
Option A is incorrect because VPN connections are established using a Virtual Private Gateway (VGW), not an Internet Gateway. Option C is wrong because IGWs do not impose bandwidth constraints; they provide a scalable bridge to the internet. Option D is incorrect because load balancing is handled by Elastic Load Balancing (ELB) services, such as Application Load Balancers or Network Load Balancers, which sit in front of EC2 instances but are distinct from the IGW itself.Community Comment Notes
The community consensus strongly favors Option B, with multiple users citing the official AWS documentation. As noted by user isaphiltrick, the definition states that an IGW allows communication between the VPC and the internet. User Ruffyit also confirmed this, referencing the same official source. The comments consistently highlight that while VGWs handle VPNs, IGWs handle general internet connectivity.Official Reference
Exam Strategy
Always distinguish between 'Internet' and 'Private' gateways. Remember that Internet Gateways provide public internet access, while Virtual Private Gateways are used for connecting your VPC to on-premises networks via VPN. Confusing these two is a frequent exam pitfall.
Frequently Asked Questions
What is the difference between an Internet Gateway and a Virtual Private Gateway?
An Internet Gateway connects a VPC to the public internet for HTTP/HTTPS traffic. A Virtual Private Gateway connects a VPC to an on-premises network via a Site-to-Site VPN.
Can an Internet Gateway load balance traffic across EC2 instances?
No. Load balancing is performed by Elastic Load Balancing (ELB) services. An Internet Gateway only routes traffic to and from the internet.
Related Analysis
Practice All CLF-C02 Questions
Access 120 questions with complete answers and detailed explanations.
View Full CLF-C02 Practice Test →