Scenario 1 – VPC with a single public subnet