AWS Certified Solutions Architect Associate SAA-C03 Practice Question

Setting up a NAT (Network Address Translation) gateway and updating the route table allows the instance to initiate outbound connections to the Internet for downloading updates while preventing inbound connections from external sources. This method keeps the instance non-public and enhances security. Merely assigning public IP address without proper routing configuration does not give Internet access regardless of security group outbound rules. Attaching an Internet gateway and routing traffic directly to the instance would expose it to inbound traffic, increasing security risks by allowing inbound connections. Configuring an endpoint connects to AWS services privately but does not provide general Internet access needed for downloading updates.