Subnets, NAT gateways, and VPN or private connection endpoints may be deployed in a single availability zone rather than placed across zones. A failure of that zone removes connectivity for every resource that depends on them, impacting the availability of workloads in the network.
Network Resources are Confined to a Single Availability Zone
CCC.VPC.TH14
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CP09 | Connectivity Options - NAT Gateways | The service can be configured with a NAT gateway that allows resources in private subnets to initiate connections to the internet without exposing them to inbound internet traffic. |
| CCC.VPC.CP13 | Connectivity Options - Site-to-site VPN | The service can establish an encrypted site-to-site VPN connection over the public internet between the virtual network and an on-premises network. |
| CCC.VPC.CP06 | Multiple Availability Zone Placement | The service can place subnets, gateways, and connection endpoints in more than one availability zone so that the loss of a single zone does not remove connectivity for the virtual network. |
Related Controls
| ID | Title | Description |
|---|---|---|
| CCC.VPC.CN13 | Deploy Network Resources Across Availability Zones | Ensure that the loss of a single availability zone does not remove connectivity for workloads in the virtual network. |