A Solutions Architect is designing a web application. The web and application tiers need to

access the Internet, but they cannot be accessed from the Internet.

Which of the following steps is required?

A. Attach an Elastic IP address to each Amazon EC2 instance and add a route from the private subnet to the public subnet.

B. Launch a NAT gateway

in the public subnet and add a route to it from the private subnet.

C. Launch Amazon EC2 instances in the public subnet and change the security group to allow outbound traffic on port 80.

D. Launch a NAT gateway in the private subnet and deploy a NAT inst

ance in the private subnet.