AWS Certified Solutions Architect Associate SAA-C03 Practice Question

Placing the web servers in a public subnet connected to an Internet Gateway (IGW) allows them to receive traffic from the Internet, satisfying the need for external accessibility. Placing the database servers in a private subnet prevents direct Internet access, enhancing security, while still allowing communication with the web servers within the VPC (Virtual Private Cloud). Placing both tiers in a public subnet would expose the database servers to the Internet, which is insecure. Placing both in a private subnet would prevent the web servers from being accessible from the Internet. Placing web servers in a private subnet and database servers in a public subnet reverses the required accessibility, making the database servers exposed to the Internet and web servers inaccessible.