You need to ensure that instances in a private subnet can access the Internet. The solution should be highly available and ensure less maintenance overhead. Which of the following would ideally fit this requirement?

Answer options:

A.Host the NAT Instance in the private subnet.
B.Host the NAT Instance in the public subnet.
C.Host the NAT Gateway in the private subnet.
D.Host the NAT Gateway in the public subnet.

Correct Answer – D
NAT gateway is used to enable instances in a private subnet to connect to the internet. However, the NAT gateway is implemented or placed in the public subnet of a VPC.For more information, please check out the following URLs-
https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
https://docs.aws.amazon.com/appstream2/latest/developerguide/managing-network-internet-manual.html
Shown below is a comparison of the NAT Gateway and NAT Instances as per the AWS Documentation. The documentation states that the NAT Gateway is highly available and requires less management.
For more information on the above comparison, please visit the following URL-
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-comparison.html