A user is hosting a public website on AWS. The user wants to have the database and the app server on the AWS VPC. The user wants to setup a database that can connect to the Internet for any patch upgrade but cannot receive any request from the internet. How can the user set this up?
A) Setup DB in a private subnet with the security group allowing only outbound traffic.
B) Setup DB in a public subnet with the security group allowing only inbound data.
C) Setup DB in a local data center and use a private gateway to connect the application with DB.
D) Setup DB in a private subnet which is connected to the internet via NAT for outbound.

Question

Quizplus · Accepted Answer

Setting up the database in a private subnet and using a NAT gateway allows the database to initiate outbound connections to the internet for updates while preventing inbound connections from the internet.

A User Is Hosting a Public Website on AWS