--- title: "How To Create A Custom VPC Using AWS CLI" lang: "en" author: "Mohammad Abu Mattar" canonical: https://mkabumattar.com/post/how-to-create-a-custom-vpc-using-aws-cli --- ![Blog post image for How To Create A Custom VPC Using AWS CLI - The example below creates a VPC with an IPv4 CIDR block, a public subnet, and a private subnet, all with AWS CLI commands. Once the VPC and subnets are configured, you can run an instance in the public subnet and connect to it. You can also start an instance in the private subnet and reach it from the instance on the public one.](/_astro/hero.BWXhtVCk_ZDEbzP.webp) [Home](/)›[Blog](/blog)›[All Categories](/blog/categories)›[AWS](/blog/categories/aws) Blog [Prev in AWSHow To Create a AWS S3 Bucket Using AWS CLI](/blog/post/how-to-create-a-aws-s3-bucket-using-aws-cli)[Next in AWSHow To Create a DynamoDB Table Using AWS CLI](/blog/post/how-to-create-a-dynamodb-table-using-aws-cli) [AWS](/blog/categories/aws)[VPC](/blog/categories/vpc)[AWS CLI](/blog/categories/aws-cli)[Cloud Networking](/blog/categories/cloud-networking)[Infrastructure as Code](/blog/categories/infrastructure-as-code) # How To Create A Custom VPC Using AWS CLI [Mohammad Abu Mattar](/authors/mohammad-abu-mattar)Published: 15 Oct 202203 Mins read03 Mins listen [Markdown for AI(opens in a new tab)](/post/how-to-create-a-custom-vpc-using-aws-cli/index.md "Open the plain-Markdown version of this page, for pasting into an AI tool") TL;DR The example below creates a VPC with an IPv4 CIDR block, a public subnet, and a private subnet, all with AWS CLI commands. Once the VPC and subnets are configured, you can run an instance in the public subnet and connect to it. You can also start an instance in the private subnet and reach it from the instance on the public one. Series [AWS CLI Guides](/series/aws-cli-guides)1/4 [NextHow To Create An AWS EC2 Instance Using AWS CLI](/blog/post/how-to-create-an-aws-ec2-instance-using-aws-cli) All posts in this series (4) Blog4 1. [How To Create A Custom VPC Using AWS CLIYou are here](/blog/post/how-to-create-a-custom-vpc-using-aws-cli) 2. [How To Create An AWS EC2 Instance Using AWS CLI](/blog/post/how-to-create-an-aws-ec2-instance-using-aws-cli) 3. [How To Create a DynamoDB Table Using AWS CLI](/blog/post/how-to-create-a-dynamodb-table-using-aws-cli) 4. [How To Create a AWS S3 Bucket Using AWS CLI](/blog/post/how-to-create-a-aws-s3-bucket-using-aws-cli) ### How To Create A Custom VPC Using AWS CLI Contents [Introduction](#introduction)[Prerequisites](#prerequisites)[Configure AWS CLI: `aws configure`](#configure-aws-cli-aws-configure)[Create a VPC](#create-a-vpc)[Modify your custom VPC and enable DNS hostname support](#modify-your-custom-vpc-and-enable-dns-hostname-support)[Create a public subnet](#create-a-public-subnet)[Enable Auto-assign Public IP on the subnet](#enable-auto-assign-public-ip-on-the-subnet)[Create an internet gateway](#create-an-internet-gateway)[Attach the internet gateway to your VPC](#attach-the-internet-gateway-to-your-vpc)[Create a custom route table](#create-a-custom-route-table)[Associate the subnet with the route table to make it public](#associate-the-subnet-with-the-route-table-to-make-it-public)[Get security group IDs](#get-security-group-ids)[Add tags to the resources in your VPC](#add-tags-to-the-resources-in-your-vpc)[Delete the VPC (cleanup)](#delete-the-vpc-cleanup)[References](#references) ## [Introduction](#introduction) The example below creates a VPC with an IPv4 CIDR block, a public subnet, and a private subnet, all with AWS CLI commands. Once the VPC and subnets are configured, you can run an instance in the public subnet and connect to it. You can also start an instance in the private subnet and reach it from the instance on the public one. ## [Prerequisites](#prerequisites) - AWS CLI - AWS Account ### [Configure AWS CLI: `aws configure`](#configure-aws-cli-aws-configure) Terminal window ``` 1# Configure AWS CLI2 3aws configure4 5#AWS Access Key ID [None]: # Enter your access key here6#AWS Secret Access Key [None]: # Enter your secret key here7#Default region name [None]: # Enter your region here8#Default output format [None]: # Enter your output format here ``` ## [Create a VPC](#create-a-vpc) Terminal window ``` 1# Get help for aws commands2 3aws help4 5# aws [COMMAND] [SUB-COMMAND] help6 7aws ec2 create-vpc help8 9# Create a VPC10 11AWS_VPC_INFO=$(aws ec2 create-vpc \12--cidr-block 10.0.0.0/16 \13--query 'Vpc.{VpcId:VpcId}' \14--output text) ``` ## [Modify your custom VPC and enable DNS hostname support](#modify-your-custom-vpc-and-enable-dns-hostname-support) Terminal window ``` 1# Modify your custom VPC and enable DNS hostname support2 3aws ec2 modify-vpc-attribute \4--vpc-id $AWS_VPC_INFO \5--enable-dns-hostnames "{\"Value\":true}" ``` ## [Create a public subnet](#create-a-public-subnet) Note Availability zones: `us-east-1a`, `us-east-1b`, `us-east-1c`, `us-east-1d`, `us-east-1e`, `us-east-1f`. Terminal window ``` 1# Create a public subnet2 3AWS_SUBNET_PUBLIC=$(aws ec2 create-subnet \4--vpc-id $AWS_VPC_INFO --cidr-block 10.0.1.0/24 \5--availability-zone us-east-1a --query 'Subnet.{SubnetId:SubnetId}' \6--output text) ``` ## [Enable Auto-assign Public IP on the subnet](#enable-auto-assign-public-ip-on-the-subnet) Terminal window ``` 1# Enable Auto-assign Public IP on the subnet2 3aws ec2 modify-subnet-attribute \4--subnet-id $AWS_SUBNET_PUBLIC \5--map-public-ip-on-launch ``` ## [Create an internet gateway](#create-an-internet-gateway) Terminal window ``` 1# Create an Internet Gateway2 3AWS_INTERNET_GATEWAY=$(aws ec2 create-internet-gateway \4--query 'InternetGateway.{InternetGatewayId:InternetGatewayId}' \5--output text) ``` ## [Attach the internet gateway to your VPC](#attach-the-internet-gateway-to-your-vpc) Terminal window ``` 1# Attach the Internet gateway to your VPC2 3aws ec2 attach-internet-gateway \4--vpc-id $AWS_VPC_INFO \5--internet-gateway-id $AWS_INTERNET_GATEWAY ``` ## [Create a custom route table](#create-a-custom-route-table) Terminal window ``` 1# Create a custom route table2 3AWS_CUSTOM_ROUTE_TABLE=$(aws ec2 create-route-table \4--vpc-id $AWS_VPC_INFO \5--query 'RouteTable.{RouteTableId:RouteTableId}' \6--output text ) ``` ## [Associate the subnet with the route table to make it public](#associate-the-subnet-with-the-route-table-to-make-it-public) Terminal window ``` 1# Associate the subnet with route table, making it a public subnet2 3AWS_ROUTE_TABLE_ASSOCITATION=$(aws ec2 associate-route-table \4--subnet-id $AWS_SUBNET_PUBLIC \5--route-table-id $AWS_CUSTOM_ROUTE_TABLE \6--output text) ``` ## [Get security group IDs](#get-security-group-ids) Terminal window ``` 1# Get security group ID’s2 3AWS_DEFAULT_SECURITY_GROUP=$(aws ec2 describe-security-groups \4--filters "Name=vpc-id,Values=$AWS_VPC_INFO" \5--query 'SecurityGroups[?GroupName == `default`].GroupId' \6--output text)7 8AWS_CUSTOM_SECURITY_GROUP=$(aws ec2 describe-security-groups \9--filters "Name=vpc-id,Values=$AWS_VPC_INFO" \10--query 'SecurityGroups[?GroupName == `vpc-cli-lab-security-group`].GroupId' \11--output text) ``` ## [Add tags to the resources in your VPC](#add-tags-to-the-resources-in-your-vpc) Terminal window ``` 1# Add tags to the resources in your VPC2 3# Add a tag to the VPC4 5aws ec2 create-tags \6--resources $AWS_VPC_INFO \7--tags "Key=Name,Value=vpc-cli-lab"8 9# Add a tag to public subnet10 11aws ec2 create-tags \12--resources $AWS_SUBNET_PUBLIC \13--tags "Key=Name,Value=vpc-cli-lab-public-subnet"14 15# Add a tag to the Internet-Gateway16 17aws ec2 create-tags \18--resources $AWS_INTERNET_GATEWAY \19--tags "Key=Name,Value=vpc-cli-lab-internet-gateway"20 21# Add a tag to the default route table22 23AWS_DEFAULT_ROUTE_TABLE=$(aws ec2 describe-route-tables \24--filters "Name=vpc-id,Values=$AWS_VPC_INFO" \25--query 'RouteTables[?Associations[0].Main != `flase`].RouteTableId' \26--output text)27 28aws ec2 create-tags \29--resources $AWS_DEFAULT_ROUTE_TABLE \30--tags "Key=Name,Value=vpc-cli-lab-default-route-table"31 32# Add a tag to the public route table33 34aws ec2 create-tags \35--resources $AWS_CUSTOM_ROUTE_TABLE \36--tags "Key=Name,Value=vpc-cli-lab-public-route-table"37 38# Add a tags to security groups39 40aws ec2 create-tags \41--resources $AWS_CUSTOM_SECURITY_GROUP \42--tags "Key=Name,Value=vpc-cli-lab-security-group"43 44aws ec2 create-tags \45--resources $AWS_DEFAULT_SECURITY_GROUP \46--tags "Key=Name,Value=vpc-cli-lab-default-security-group" ``` ## [Delete the VPC (cleanup)](#delete-the-vpc-cleanup) Terminal window ``` 1# Delete custom security group2 3aws ec2 delete-security-group \4--group-id $AWS_CUSTOM_SECURITY_GROUP5 6# Delete internet gateway7aws ec2 detach-internet-gateway \8--internet-gateway-id $AWS_INTERNET_GATEWAY \9--vpc-id $AWS_VPC_INFO10 11aws ec2 delete-internet-gateway \12--internet-gateway-id $AWS_INTERNET_GATEWAY13 14# Delete the custom route table15 16aws ec2 disassociate-route-table \17--association-id $AWS_ROUTE_TABLE_ASSOCITATION18 19aws ec2 delete-route-table \20--route-table-id $AWS_CUSTOM_ROUTE_TABLE21 22# Delete the public subnet23 24aws ec2 delete-subnet \25--subnet-id $AWS_SUBNET_PUBLIC26 27# Delete the vpc28 29aws ec2 delete-vpc \30--vpc-id $AWS_VPC_INFO ``` ## [References](#references) - [AWS CLI User Guide - Getting Started](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-welcome.html) - [AWS CLI User Guide - Configuring the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html) - [AWS CLI Command Reference - `ec2 create-vpc`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-vpc.html) - [AWS CLI Command Reference - `ec2 modify-vpc-attribute`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/modify-vpc-attribute.html) - [AWS CLI Command Reference - `ec2 create-subnet`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-subnet.html) - [AWS CLI Command Reference - `ec2 modify-subnet-attribute`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/modify-subnet-attribute.html) - [AWS CLI Command Reference - `ec2 create-internet-gateway`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-internet-gateway.html) - [AWS CLI Command Reference - `ec2 attach-internet-gateway`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/attach-internet-gateway.html) - [AWS CLI Command Reference - `ec2 create-route-table`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-route-table.html) - [AWS CLI Command Reference - `ec2 associate-route-table`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/associate-route-table.html) - [AWS CLI Command Reference - `ec2 describe-security-groups`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-security-groups.html) - [AWS CLI Command Reference - `ec2 create-tags`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-tags.html) - [AWS CLI Command Reference - `ec2 delete-security-group`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/delete-security-group.html) - [AWS CLI Command Reference - `ec2 detach-internet-gateway`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/detach-internet-gateway.html) - [AWS CLI Command Reference - `ec2 delete-vpc`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/delete-vpc.html) Was this useful? ## Tags [#AWS VPC](/blog/tags/aws-vpc)[#AWS CLI Commands](/blog/tags/aws-cli-commands)[#Virtual Private Cloud](/blog/tags/virtual-private-cloud)[#Subnets](/blog/tags/subnets)[#Internet Gateway](/blog/tags/internet-gateway)[#Route Tables](/blog/tags/route-tables)[#Security Groups](/blog/tags/security-groups)[#AWS Networking](/blog/tags/aws-networking)[#Cloud Infrastructure](/blog/tags/cloud-infrastructure)[#DevOps](/blog/tags/devops) ## Share [Facebook](https://facebook.com/sharer/sharer.php?u=https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli "Share on Facebook")[Twitter](https://twitter.com/intent/tweet/?text=How%20To%20Create%20A%20Custom%20VPC%20Using%20AWS%20CLI&url=https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli "Share on Twitter")[LinkedIn](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli&title=How%20To%20Create%20A%20Custom%20VPC%20Using%20AWS%20CLI&summary=The%20example%20below%20creates%20a%20VPC%20with%20an%20IPv4%20CIDR%20block%2C%20a%20public%20subnet%2C%20and%20a%20private%20subnet%2C%20all%20with%20AWS%20CLI%20commands.%20Once%20the%20VPC%20and%20subnets%20are%20configured%2C%20you%20can%20run%20an%20instance%20in%20the%20public%20subnet%20and%20connect%20to%20it.%20You%20can%20also%20start%20an%20instance%20in%20the%20private%20subnet%20and%20reach%20it%20from%20the%20instance%20on%20the%20public%20one.&source=https://mkabumattar.com "Share on LinkedIn")[WhatsApp](https://wa.me/?text=How%20To%20Create%20A%20Custom%20VPC%20Using%20AWS%20CLI%20https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli "Share on WhatsApp")[Telegram](https://t.me/share/url?url=https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli&text=How%20To%20Create%20A%20Custom%20VPC%20Using%20AWS%20CLI "Share on Telegram")[Reddit](https://www.reddit.com/submit?url=https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli&title=How%20To%20Create%20A%20Custom%20VPC%20Using%20AWS%20CLI "Share on Reddit")[Hacker News](http://news.ycombinator.com/submitlink?u=https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli&t=How%20To%20Create%20A%20Custom%20VPC%20Using%20AWS%20CLI "Share on Hacker News")[Pinterest](https://pinterest.com/pin/create/button/?url=https%3A%2F%2Fmkabumattar.com%2Fblog%2Fpost%2Fhow-to-create-a-custom-vpc-using-aws-cli&media=&description=The%20example%20below%20creates%20a%20VPC%20with%20an%20IPv4%20CIDR%20block%2C%20a%20public%20subnet%2C%20and%20a%20private%20subnet%2C%20all%20with%20AWS%20CLI%20commands.%20Once%20the%20VPC%20and%20subnets%20are%20configured%2C%20you%20can%20run%20an%20instance%20in%20the%20public%20subnet%20and%20connect%20to%20it.%20You%20can%20also%20start%20an%20instance%20in%20the%20private%20subnet%20and%20reach%20it%20from%20the%20instance%20on%20the%20public%20one. "Share on Pinterest")[Email]() ## Comments ## You might also enjoy More posts on similar topics [![How To Create An AWS EC2 Instance Using AWS CLI](/_astro/hero.Dh2x9Phr_14dc4A.webp)](/blog/post/how-to-create-an-aws-ec2-instance-using-aws-cli) ## [How To Create An AWS EC2 Instance Using AWS CLI](/blog/post/how-to-create-an-aws-ec2-instance-using-aws-cli) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [EC2](/blog/categories/ec2) - [VPC](/blog/categories/vpc) - [AWS CLI](/blog/categories/aws-cli) - [WordPress](/blog/categories/wordpress) - [Linux](/blog/categories/linux) Introduction In this tutorial we will create an AWS EC2 instance with the AWS CLI. We will build the network around it first, then launch the instance with a user data script that installs the Apa [#AWS CLI EC2](/blog/tags/aws-cli-ec2)[#AWS CLI VPC](/blog/tags/aws-cli-vpc)[#VPC Configuration](/blog/tags/vpc-configuration)+8 tags [read more](/blog/post/how-to-create-an-aws-ec2-instance-using-aws-cli) [![How To Create a AWS S3 Bucket Using AWS CLI](/_astro/hero.CDw8keBv_tv9MO.webp)](/blog/post/how-to-create-a-aws-s3-bucket-using-aws-cli) ## [How To Create a AWS S3 Bucket Using AWS CLI](/blog/post/how-to-create-a-aws-s3-bucket-using-aws-cli) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [S3](/blog/categories/s3) - [AWS CLI](/blog/categories/aws-cli) - [Cloud Storage](/blog/categories/cloud-storage) Introduction In this post, I will show you how to create an AWS S3 bucket using AWS CLI. Prerequisites You need to have:AWS CLI installed and configured AWS S3 bucket nameAWS S3 bu [#AWS S3 Bucket](/blog/tags/aws-s3-bucket)[#AWS CLI Commands](/blog/tags/aws-cli-commands)[#S3 Management](/blog/tags/s3-management)+3 tags [read more](/blog/post/how-to-create-a-aws-s3-bucket-using-aws-cli) [![How To Create a DynamoDB Table Using AWS CLI](/_astro/hero.DFm0nlBr_ZmQrVw.webp)](/blog/post/how-to-create-a-dynamodb-table-using-aws-cli) ## [How To Create a DynamoDB Table Using AWS CLI](/blog/post/how-to-create-a-dynamodb-table-using-aws-cli) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [DynamoDB](/blog/categories/dynamodb) - [AWS CLI](/blog/categories/aws-cli) - [NoSQL Databases](/blog/categories/nosql-databases) Introduction In this article, we will learn how to create a DynamoDB table using AWS CLI. We will also learn how to add items to the table and how to query the table. Prerequisites To follow [#AWS DynamoDB](/blog/tags/aws-dynamodb)[#AWS CLI Commands](/blog/tags/aws-cli-commands)[#NoSQL](/blog/tags/nosql)+4 tags [read more](/blog/post/how-to-create-a-dynamodb-table-using-aws-cli) [![How To Setup Bastion Host on AWS using AWS CLI](/_astro/hero.DGhoBA0r_KL9IM.webp)](/blog/post/how-to-setup-bastion-host-on-aws-using-aws-cli) ## [How To Setup Bastion Host on AWS using AWS CLI](/blog/post/how-to-setup-bastion-host-on-aws-using-aws-cli) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [AWS CLI](/blog/categories/aws-cli) - [Security](/blog/categories/security) - [Networking](/blog/categories/networking) - [DevOps](/blog/categories/devops) Introduction Security is the top priority for any infrastructure and application, and that's why a Bastion host is a must-have in your infrastructure if you want to secure your remote connections. [#AWS Bastion Host](/blog/tags/aws-bastion-host)[#AWS CLI](/blog/tags/aws-cli)[#VPC Setup](/blog/tags/vpc-setup)+7 tags [read more](/blog/post/how-to-setup-bastion-host-on-aws-using-aws-cli) [![How To Connect A Two EC2 Instances Data Transfer Using AWS CLI Without AWS EFS](/_astro/hero.WG5UXtzN_2uuusz.webp)](/blog/post/how-to-connect-a-two-ec2-instances-data-transfer-using-aws-cli-without-aws-efs) ## [How To Connect A Two EC2 Instances Data Transfer Using AWS CLI Without AWS EFS](/blog/post/how-to-connect-a-two-ec2-instances-data-transfer-using-aws-cli-without-aws-efs) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [EC2](/blog/categories/ec2) - [S3](/blog/categories/s3) - [Data Transfer](/blog/categories/data-transfer) - [AWS CLI](/blog/categories/aws-cli) Introduction In this post, I will show you how to transfer data between two EC2 instances using AWS CLI, without AWS EFS. We will use an AWS S3 bucket as the middleman. We will create an AWS S3 b [#AWS S3 Sync](/blog/tags/aws-s3-sync)[#EC2 Data Transfer](/blog/tags/ec2-data-transfer)[#AWS CLI Automation](/blog/tags/aws-cli-automation)+5 tags [read more](/blog/post/how-to-connect-a-two-ec2-instances-data-transfer-using-aws-cli-without-aws-efs) [![How To Connect A EBS Volume To An Windows EC2 Instance Using Powershell/GUI](/_astro/hero.CPGBv147_1yKKK8.webp)](/blog/post/how-to-connect-a-ebs-volume-to-an-windows-ec2-instance-using-powershell-gui) ## [How To Connect A EBS Volume To An Windows EC2 Instance Using Powershell/GUI](/blog/post/how-to-connect-a-ebs-volume-to-an-windows-ec2-instance-using-powershell-gui) - [Mohammad Abu Mattar](/authors/mohammad-abu-mattar) - [AWS](/blog/categories/aws) - [Windows Server](/blog/categories/windows-server) - [EC2](/blog/categories/ec2) - [EBS](/blog/categories/ebs) - [PowerShell](/blog/categories/powershell) Introduction In this post, we will learn how to connect an EBS volume to a Windows EC2 instance using PowerShell or the Disk Management GUI, and how to mount the volume on the instance. Prereq [#AWS EBS](/blog/tags/aws-ebs)[#Windows EC2](/blog/tags/windows-ec2)[#Attach EBS Volume](/blog/tags/attach-ebs-volume)+5 tags [read more](/blog/post/how-to-connect-a-ebs-volume-to-an-windows-ec2-instance-using-powershell-gui) 6 related posts