VPC with Public and Private Subnets (NAT)