A company is running an application in a private subnet in a VPC with an attached internet gateway. The company needs to provide the application access to the internet while restricting public access to the application. The company does not want to manage additional infrastructure and wants a solution that is highly available and scalable.
Which solution meets these requirements?
A. Create a NAT gateway in the private subnet. Create a route table entry from the private subnet to the internet gateway.
B. Create a NAT gateway in a public subnet. Create a route table entry from the private subnet to the NAT gateway.
C. Launch a NAT instance in the private subnet. Create a route table entry from the private subnet to the internet gateway.
D. Launch a NAT instance in a public subnet. Create a route table entry from the private subnet to the NAT instance.