# Virtual Private Cloud (VPCs, tiers/subnets, ACLs)

Create isolated networks with custom CIDRs and per-subnet controls.

> Insert screenshot of **VPC → Details** here

## Steps ▶️

1. **Create VPC** with CIDR (e.g., `10.20.0.0/16`)
2. Add **subnets/tiers** (e.g., `10.20.1.0/24` for web, `10.20.2.0/24` for app)
3. Attach workloads; apply **ACLs/security groups**

## Tips 💡

* Separate **public**, **app**, and **data** subnets
* Reserve space for **bastion** and **VPN**
