A company hosts a popular web application. The web application connects to a database running in a private VPC subnet. The web servers must be accessible only to customers on an

SSL connection. The RDS MySQL database server must be accessible only from the web servers.

How should the Architect design a solution to meet the requirements without impacting running applications?

A. Create a network ACL on the web server-s subnet, an

d allow HTTPS inbound and MySQL outbound. Place both database and web servers on the same subnet.

B. Open an HTTPS port on the security group for web servers and set the source to 0.0.0.0/0. Open the MySQL port on the database security group and attach it

to the MySQL instance. Set the source to Web Server Security Group.

C. Create a network ACL on the web server-s subnet, and allow HTTPS inbound, and specify the source as 0.0.0.0/0. Create a network ACL on a database subnet, allow MySQL port inbound for we

b servers, and deny all outbound traffic.

D. Open the MySQL port on the security group for web servers and set the source to 0.0.0.0/0. Open the HTTPS port on the database security group and attach it to the MySQL instance. Set the source to Web Server Sec

urity Group.