Public vs Private Subnets
Database servers in a private subnet need to download OS updates from the internet but must not be reachable from it. What is the standard setup?
Choose one answer
Give each database server a public IP.
Route the private subnet's 0.0.0.0/0 traffic to a NAT gateway located in a public subnet.
Attach an internet gateway directly to the private subnet's route table.
Open inbound 0.0.0.0/0 on the database security group.