## General Info - A NAT is required for the Lambda to access the internet. - Connect to an AWS Aurora Serverless database using Cloud9 (or an SSH tunnel through an additional EC2 instance). ## Subnets The public subnet has the route table with the internet gateway (igw) The private subnet has the rotue table with the nat. - To create a new subnet, increment the third section. (10.0.x.0/24) - Application Load Balancers go in __public__ subnets. - Lambda functions go in __private__ subnets. - When creating a new subnet manually, make sure to it's route table association matches the relevant route table (public/private). ## Other - Don't forget to configure security groups. - Unlike NAT gateways, internet gateways give your instances direct internet access at no cost (https://aws.amazon.com/premiumsupport/knowledge-center/vpc-reduce-nat-gateway-transfer-costs/). But only for resources in the public subnet.