[Solved] You have a VPC with both public and private subnets. You want instances in the private subnet to access the internet for updates but not be reachable... How should you configure internet access? | AWS

AWS - VPC Fundamentals

You have a VPC with both public and private subnets. You want instances in the private subnet to access the internet for updates but not be reachable from the internet. How should you configure internet access?

AAttach an Internet Gateway to the VPC, use a NAT Gateway in the public subnet, and update private subnet route table to point to NAT Gateway.

BAttach an Internet Gateway and assign public IPs to private subnet instances.

CAttach an Internet Gateway and update private subnet route table to point directly to IGW.

DDo not attach an Internet Gateway and use only private IPs.

Step-by-Step Solution

Solution:

Step 1: Understand private subnet internet access
Private subnet instances cannot have public IPs but need internet access via NAT Gateway.
Step 2: Configure NAT Gateway and routing
Attach IGW to VPC, create NAT Gateway in public subnet, and route private subnet traffic to NAT Gateway.
Final Answer:
Attach an Internet Gateway to the VPC, use a NAT Gateway in the public subnet, and update private subnet route table to point to NAT Gateway. -> Option A
Quick Check:
Private subnet internet via NAT Gateway and IGW [OK]

Quick Trick: Private subnet uses NAT Gateway with IGW for internet access [OK]

Common Mistakes:

MISTAKES

Assigning public IPs to private subnet instances
Routing private subnet directly to IGW

Master "VPC Fundamentals" in AWS

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More AWS Quizzes

How should you configure internet access?

Step 1: Understand private subnet internet access

Step 2: Configure NAT Gateway and routing

Final Answer:

Quick Check:

Want More Practice?