Subnet

  • Subset of the VPCVPC CIDR block

  • Subnet CIDR blocks cannot overlap

  • Each subnet resides entirely within one Availability Zone

  • An Availability Zone can contain multiple subnets

  • AWS reserves five IP addresses from each subnet

See more: Security Group vs NACL