An architect is designing a VPC with a public subnet for web servers and a private subnet for databases. The database instances need to download security updates from the internet without being reachable from the internet. How should this be implemented?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?

You need to create a logically isolated section of your cloud environment where you can launch resources in a virtual network that you define. Which service provides this?