- A NAT is required for the Lambda to access the internet.
- Connect to an AWS Aurora Serverless database using Cloud9 (or an SSH tunnel through an additional EC2 instance).
The public subnet has the route table with the internet gateway (igw) The private subnet has the rotue table with the nat.
- To create a new subnet, increment the third section. (10.0.x.0/24)
- Application Load Balancers go in public subnets.
- Lambda functions go in private subnets.
- When creating a new subnet manually, make sure to it's route table association matches the relevant route table (public/private).
- Don't forget to configure security groups.
- Unlike NAT gateways, internet gateways give your instances direct internet access at no cost (https://aws.amazon.com/premiumsupport/knowledge-center/vpc-reduce-nat-gateway-transfer-costs/). But only for resources in the public subnet.