Glossary
Also: Virtual Private Cloud
Your own virtual network in AWS, where subnets, routes and access rules are defined.
The VPC determines what may talk to what and what is reachable from outside. Public subnets have a route to the internet, private ones do not, and translation sits between them.
It is one of the decisions with a long half-life: changing address ranges once systems are running is painful to impossible.