AWS Management Console -> Services from Top menu -> type "vpc" -> select VPC (isolated service) -> Create VPC

STEP 1. Create VPC

- IPv4 CIDR block*: 10.0.0.0/16
- check at No IPv6 CIDR Block
- Tenancy = default

STEP 2. Create internet gateway

1) Create internet gateway: initial state will be "detached"
2) Attach to VPC

STEP 3. Create "Public Subnet"

1) Select VPC: it will automatically set set VPC CIDRs

2) set Availability Zone

3) set IPv4 CIDR block*: 10.0.1.0/24

STEP 4. Create "Private Subnet"

1) Select VPC: it will automatically set set VPC CIDRs

2) set Availability Zone

3) set IPv4 CIDR block*: 10.0.2.0/24

STEP 5. Set Public Route Tables

1) Usually automatically generated, and requires renaming like "Public RT" for you

2) Select your route table →  move tap to "Routes" →  add route → add "0.0.0.0/0" and set target to internet gateway defined at STEP 2

3) move tap to "Subnet Associations" →  Edit subnet associations -> Select only "public subnets" -> Save

STEP 6. Set Private Route Tables

1) Create Private Route Table and name it like "Private RT" for you

2) move tap to "Subnet Associations" →  Edit subnet associations →  Select only "private subnets" defined at STEP 4 →  Save

STEP 7. Create security group

1) One default inbound rule will be listed

2) Add one more a rule : set Type to "SSH" →  set Protocol to "TCP" →  set Port Range to 22 →  set Source to "My IP" →  Your IP will be automatically assigned or your can simply assign 0.0.0.0/0

STEP 8. Create network ACL

1) One default ACL will be listed, and just rename it in your own way

2) Set Inbound Rules

STEP 9. Creating instances

1) Launching  Instances → Choose an AMI (Amazon Machine Image) → Free Tier only (if you are new)

2) Select Network by VPC designed at STEP 1

3) Select Subnet designed at STEP 3 and STEP 4

4) Enable "Auto Assign Public IP"

5) Configure Security Group based on you created at STEP 7

6) Download key Pair for secure connection → Launch Instances

Reference: https://www.youtube.com/watch?v=gUesnoDzNr4