You have instances hosted in a private subnet in a VPC. There is a need for instances to download updates from the Internet. As an architect, what change would you suggest to the IT Operations team that would also be the most efficient and secure?

Answer options:

A.Create a new public subnet and move the instance to that subnet.
B.Create a new EC2 Instance to download the updates separately and then push them to the required instance.
C.Use a NAT Gateway to allow the instances in the private subnet to download the updates.
D.Create a VPC link to the Internet to allow the instances in the private subnet to download the updates.