AWS VPC Architecture: Public vs Private Subnets, NAT, and Internet Gateways

If you’re building anything on AWS, you’ll run into VPC architecture pretty quickly — and getting it wrong means either locking down your resources too tightly or leaving them exposed to the internet.