What is a VPC? Public vs private subnets.

VPC networking

Virtual private cloud with subnets. Public subnet has route to Internet Gateway; private subnet uses NAT for outbound only.

• Security groups = stateful firewall on instance
• NACL = subnet-level optional