VPC

Provision a private, logically isolated section of the AWS cloud to launch resources in a virtual network you define.

AWS VPC gives you complete control over your virtual networking environment: you select your IP address range (e.g., 10.0.0.0/16), create subnets, and configure route tables. Security is managed via stateful Security Groups and stateless Network Access Control Lists (ACLs) to filter traffic at the instance and subnet levels. You can bridge your on-premises data center to the cloud using AWS Direct Connect or a standard VPN. This setup ensures that high-value assets like RDS databases or internal EC2 fleets remain isolated from the public internet while maintaining high-speed connectivity.

https://aws.amazon.com/vpc/