---
title: "subnets"
lang: "en"
author: "Mohammad Abu Mattar"
canonical: https://mkabumattar.com/devtips/tags/subnets
---

[Home](/)›[All Tips](/devtips)›[All Tags](/devtips/tags)›[Subnets](/devtips/tags/subnets)

Tag

1Tip

# #Subnets

CategoryAllDevOps & DevSecOps (5)Cloud & Infrastructure Automation (4)Kubernetes & Containers (3)Aws (1)Ci cd (1)Cloud (1)Containers & Docker (1)Developer Tools & Productivity (1)Devops (1)DevOps & Kubernetes (1)DevOps & Observability (1)Kubernetes & Cloud Native (1)Kubernetes & DevOps (1)Networking (1)Observability & Monitoring (1)Productivity (1)TagAllDevOps (7)Kubernetes (6)Terraform (6)IaC (4)CI/CD (3)DevSecOps (3)Docker (3)Infrastructure as Code (3)Microservices (3)Aws (2)Cloud Automation (2)Cloud Infrastructure (2)Cloud Native (2)Deployment (2)GitHub Actions (2)GitOps (2)Helm (2)Infrastructure (2)Monitoring (2)Observability (2)Security (2)Terragrunt (2)AI Agents (1)AI Tools (1)ArgoCD (1)Automation (1)AWS ALB (1)Bash (1)BuildKit (1)Caching (1)CDKTF (1)Cert manager (1)Ci cd (1)CICD Security (1)Cloud Security (1)ClusterIP (1)Command Line (1)Compliance (1)Container Image (1)Container Orchestration (1)Container Security (1)Containerization (1)Containers (1)Continuous Delivery (1)Credentials (1)Developer Productivity (1)Developer Tools (1)Distributed Tracing (1)Distroless (1)Docker Cleanup (1)DRY Principle (1)Elasticsearch (1)ELK Stack (1)Environment Variables (1)Environments (1)GitHub Copilot (1)Governance (1)HashiCorp (1)Home Lab (1)IAM Roles (1)IDE Extensions (1)Image Optimization (1)Infrastructure Maintenance (1)Ingress controller (1)K8s Services (1)Kibana (1)Least Privilege (1)LimitRange (1)Linux (1)LoadBalancer (1)Logging (1)Modules (1)Monorepo (1)Multi Stage Build (1)Multi Tenancy (1)Namespaces (1)Networking (1)NetworkPolicy (1)Nginx (1)NodePort (1)OIDC (1)OPA/Rego (1)OpenTelemetry (1)OpenTofu (1)Parallelism (1)Pipeline Security (1)Platform Engineering (1)Policy as Code (1)Productivity (1)PruneMate (1)Pulumi (1)RBAC (1)Remote state (1)ResourceQuota (1)Secrets (1)Security groups (1)Shell Scripting (1)Storage Management (1)Subnets (1)Supply Chain Security (1)Terminal (1)TLS (1)Traefik (1)Trivy (1)Vpc (1)VS Code (1)Vulnerability Scanning (1)Workspaces (1)SortNewest firstOldest firstA to ZShortest read first

[![AWS VPC Design Best Practices: Subnets, Route Tables, and Security Groups](/_astro/hero.Db5Lgxho_Z199ayW.webp)](/devtips/post/aws-vpc-design-subnets-route-tables-security-groups)

## [AWS VPC Design Best Practices: Subnets, Route Tables, and Security Groups](/devtips/post/aws-vpc-design-subnets-route-tables-security-groups)

-   [Aws](/devtips/categories/aws)
-   [Networking](/devtips/categories/networking)
-   09 Oct 2026
-   05 Mins read

A VPC is one of the few things in AWS you cannot meaningfully refactor later. You can resize an instance, swap a database engine, rewrite a service. You cannot change a VPC's primary CIDR block, and y

[#Aws](/devtips/tags/aws)[#Vpc](/devtips/tags/vpc)[#Networking](/devtips/tags/networking)+3 tags

[Read Tip](/devtips/post/aws-vpc-design-subnets-route-tables-security-groups)