You are working as a Solutions Architect in an organization. You have peered VPC A and VPC B as a requester and an acceptor where both the VPCs can communicate with each other. Now you want the resources in the private subnets of both the VPCs to reach out to the internet. But no one on the internet should be able to reach the resources within both the VPCs. Which of the below will achieve the desired outcome?

Answer options:

A.Create a NAT Gateway in VPC A and route VPC B`s outbound to VPC A`s NAT Gateway.
B.Create an Internet Gateway in VPC A and route VPC B`s outbound to VPC A`s Internet Gateway.
C.Create NAT Gateways in both VPCs and configure routes for each VPC to use its own NAT Gateway.
D.Simply create a NAT Instance in VPC A.Nothing else is required.

Correct Answer: C 
Option A is INCORRECT because you can`t share NAT gateways across VPCs.
Option B is INCORRECT because attaching an IGW to a VPC allows instances with public IPs to access the internet. In contrast, NATs allow instances with no public IPs to access the internet.
Option C is CORRECT because you can create NAT Gateways on both VPC`s and configure routes to the NAT Gateways in the respective route tables.
Option D is INCORRECT because a stand-alone NAT Instance in VPC A doesn`t accomplish anything.
For more information:
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-comparison.html
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-gateway.html#nat- gateway-basics
https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Internet_Gateway.html