AWS VPC

Outdated platforms lack critical security patches, making them easy targets for cyberattacks. Compliance issues with GDPR or CCPA violations could sink a business, and data isolation between tenants in multi-tenant systems remains a critical risk.

Inadequate network security measures expose AWS applications to external threats. Developers must properly configure VPCs and security groups, which requires significant security expertise.

AWS VPC networking topology is confusing, with non-intuitive constraints like subnets being restricted to single availability zones ('one subnet equals one availability zone'). This creates gotchas when designing multi-AZ deployments.