Building a Secure AWS Network From Scratch: Public Subnet, Private Subnet, Bastion Host, and NAT Gateway

When you first launch an EC2 instance, AWS feels simple. You click a few buttons.You get a public IP.You SSH in. And for a while, that feels like “cloud”. But the moment you ask: Who should be allowed in? Who should never be seen? How do private syst...