VPC

import { Vpc } from "@fjall/components-infrastructure/lib/resources/aws/networking/vpc";

const vpc = new Vpc(this, "MyVpc", {
  maxAzs: 3,
  natGateways: 1
});

const vpc = new Vpc(this, "StandardVpc");

// Creates by default:
// - 3 public subnets (1 per AZ)
// - 3 private subnets with egress (1 per AZ)
// - Internet Gateway
// - NAT Gateway(s) based on configuration

const vpc = new Vpc(this, "CustomVpc", {
  maxAzs: 2,
  subnetConfiguration: [
    {
      name: 'public',
      subnetType: ec2.SubnetType.PUBLIC,
      cidrMask: 24
    },
    {
      name: 'private',
      subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
      cidrMask: 24
    },
    {
      name: 'isolated',
      subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
      cidrMask: 24
    }
  ]
});

const vpc = new Vpc(this, "IpamVpc", {
  accountId: "123456789012",
  ipv4IpamPoolId: "ipam-pool-1234567890abcdef0",
  // IPAM automatically allocates /20 CIDR block
});

// Flow logs enabled when accountId is provided
const vpc = new Vpc(this, "MonitoredVpc", {
  accountId: "123456789012"
});

// Logs stored in: /vpc/flowlogs/vpc-${id}/

const vpc = new Vpc(this, "CustomFlowLogsVpc");

vpc.addFlowLog('S3FlowLog', {
  destination: ec2.FlowLogDestination.toS3(bucket),
  trafficType: ec2.FlowLogTrafficType.ALL
});

const vpcFactory = VpcFactory.build("AppVpc", {
  maxAzs: 2,
  natGateways: 1
});

const vpc = vpcFactory(app, this);

const vpc = Vpc.build("NetworkVpc", {
  maxAzs: 3
})(stackBuilder);

const importedVpc = Vpc.import(
  "ImportedVpc",
  "existing-stack-name"
)(stackBuilder);

const vpc = new Vpc(this, "SecureVpc");

const nacl = new ec2.NetworkAcl(this, 'CustomNACL', {
  vpc,
  subnetSelection: { subnetType: ec2.SubnetType.PUBLIC }
});

nacl.addEntry('AllowHTTPS', {
  cidr: ec2.AclCidr.anyIpv4(),
  ruleNumber: 100,
  traffic: ec2.AclTraffic.tcpPort(443),
  direction: ec2.TrafficDirection.INGRESS,
  ruleAction: ec2.Action.ALLOW
});

const vpc = new Vpc(this, "EndpointVpc");

// S3 Gateway Endpoint
vpc.addGatewayEndpoint('S3Endpoint', {
  service: ec2.GatewayVpcEndpointAwsService.S3
});

// Interface Endpoints for AWS services
vpc.addInterfaceEndpoint('SecretsEndpoint', {
  service: ec2.InterfaceVpcEndpointAwsService.SECRETS_MANAGER
});

// Single NAT Gateway (lower cost)
const devVpc = new Vpc(this, "DevVpc", {
  natGateways: 1
});

// No NAT Gateway (lowest cost)
const isolatedVpc = new Vpc(this, "IsolatedVpc", {
  natGateways: 0
});

// NAT Instance (cost-effective alternative)
const natInstanceVpc = new Vpc(this, "NatInstanceVpc", {
  natGatewayProvider: ec2.NatProvider.instance({
    instanceType: ec2.InstanceType.of(
      ec2.InstanceClass.T3,
      ec2.InstanceSize.NANO
    )
  })
});

// Share VPC across accounts
const sharedVpc = new Vpc(this, "SharedVpc");

new ram.CfnResourceShare(this, 'VpcShare', {
  name: 'shared-vpc',
  resourceArns: [sharedVpc.vpcArn],
  principals: ['123456789012']  // Account IDs
});

const vpc1 = new Vpc(this, "Vpc1");
const vpc2 = new Vpc(this, "Vpc2");

const peering = new ec2.CfnVPCPeeringConnection(this, 'Peering', {
  vpcId: vpc1.vpcId,
  peerVpcId: vpc2.vpcId
});

// Update route tables
vpc1.privateSubnets.forEach(subnet => {
  new ec2.CfnRoute(this, `Route1-${subnet.node.id}`, {
    routeTableId: subnet.routeTable.routeTableId,
    destinationCidrBlock: vpc2.vpcCidrBlock,
    vpcPeeringConnectionId: peering.ref
  });
});

const transitGateway = new ec2.CfnTransitGateway(this, 'TGW', {
  amazonSideAsn: 64512,
  description: 'Central transit gateway'
});

const attachment = new ec2.CfnTransitGatewayAttachment(this, 'TGWAttachment', {
  transitGatewayId: transitGateway.ref,
  vpcId: vpc.vpcId,
  subnetIds: vpc.privateSubnets.map(s => s.subnetId)
});

const azs = Vpc.availabilityZones(this);
// Returns: First 3 AZs in the region

const flowLogs = Vpc.flowLogs(this, "MyVpc", {
  accountId: "123456789012"
});
// Returns: Flow log configuration object

const ipConfig = Vpc.ipAddresses(this, "MyVpc", {
  accountId: "123456789012",
  ipv4IpamPoolId: "ipam-pool-123"
});
// Returns: IPAM allocation configuration

import { Vpc } from "@fjall/components-infrastructure/lib/resources/aws/networking/vpc";
import * as ec2 from "aws-cdk-lib/aws-ec2";

// Production VPC with full configuration
const prodVpc = new Vpc(this, "ProductionVpc", {
  // Network configuration
  maxAzs: 3,
  natGateways: 2,  // HA NAT
  
  // IPAM integration
  accountId: this.account,
  ipv4IpamPoolId: props.ipamPoolId,
  
  // Custom subnets
  subnetConfiguration: [
    {
      name: 'web',
      subnetType: ec2.SubnetType.PUBLIC,
      cidrMask: 24
    },
    {
      name: 'app',
      subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS,
      cidrMask: 23
    },
    {
      name: 'data',
      subnetType: ec2.SubnetType.PRIVATE_ISOLATED,
      cidrMask: 24
    }
  ]
});

// Add VPC endpoints to reduce costs
prodVpc.addGatewayEndpoint('S3Endpoint', {
  service: ec2.GatewayVpcEndpointAwsService.S3,
  subnets: [{ subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }]
});

prodVpc.addInterfaceEndpoint('EcrEndpoint', {
  service: ec2.InterfaceVpcEndpointAwsService.ECR,
  subnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS }
});

// Security group for web tier
const webSg = new ec2.SecurityGroup(this, 'WebSecurityGroup', {
  vpc: prodVpc,
  description: 'Web tier security group',
  allowAllOutbound: true
});

webSg.addIngressRule(
  ec2.Peer.anyIpv4(),
  ec2.Port.tcp(443),
  'Allow HTTPS from anywhere'
);

// Application deployment
const app = new EcsCluster(this, "App", {
  vpc: prodVpc,
  serviceName: "production-app"
});

// Database in isolated subnet
const database = new RdsAurora(this, "Database", {
  vpc: prodVpc,
  databaseName: "production",
  vpcSubnets: {
    subnetType: ec2.SubnetType.PRIVATE_ISOLATED
  }
});

// Output VPC details
new CfnOutput(this, 'VpcId', {
  value: prodVpc.vpcId,
  description: 'VPC ID'
});

new CfnOutput(this, 'VpcCidr', {
  value: prodVpc.vpcCidrBlock,
  description: 'VPC CIDR block'
});

const vpc = new Vpc(this, "MultiTierVpc", {
  subnetConfiguration: [
    { name: 'web', subnetType: ec2.SubnetType.PUBLIC },
    { name: 'app', subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },
    { name: 'db', subnetType: ec2.SubnetType.PRIVATE_ISOLATED }
  ]
});

// Hub VPC
const hubVpc = new Vpc(this, "HubVpc", {
  cidr: '10.0.0.0/16'
});

// Spoke VPCs
const spoke1 = new Vpc(this, "Spoke1", {
  cidr: '10.1.0.0/16'
});

// Connect via Transit Gateway

const sharedVpc = new Vpc(this, "SharedServicesVpc", {
  maxAzs: 2,
  natGateways: 1
});

// Deploy shared services
// - Active Directory
// - DNS servers
// - Monitoring tools

# Describe VPC
aws ec2 describe-vpcs --vpc-ids vpc-12345

# Check route tables
aws ec2 describe-route-tables --filters "Name=vpc-id,Values=vpc-12345"

# Security groups
aws ec2 describe-security-groups --filters "Name=vpc-id,Values=vpc-12345"