How should the solutions architect change the architecture to meet these requirements?

A company is launching a new application that will be hosted on Amazon EC2 instances. A solutions architect needs to design a solution that does not allow public IPv4 access that originates from the internet. However, the solution must allow the EC2 instances to make outbound IPv4 internet requests.

The initial design proposal shows that the EC2 instances would be located in two private subnets across two Availability Zones. The entire architecture must be highly available.

How should the solutions architect change the architecture to meet these requirements?
A . Deploy a NAT gateway in public subnets in both Availability Zones. Create and configure one route table for each private subnet.
B . Deploy an internet gateway in public subnets in both Availability Zones. Create and configure a shared route table for the private subnets.
C . Deploy a NAT gateway in public subnets in both Availability Zones. Create and configure a shared route table for the private subnets.
D . Deploy an egress-only internet gateway in public subnets in both Availability Zones.
Create and configure one route table for each private subnet.

View Answer

Answer: C