Day 2: NAT Gateway — Outbound Internet Access for Private Subnets

Private EC2 instances have no internet access by default. That’s fine for security, but it also means they can’t run yum update, install packages, or call an external API. A NAT Gateway solves this by