- Getting inside a VPC from outside is hard
- Managing network ACLs
- Configuring security groups
- Setting up routing tables