Scenario 2 – VPC with public and private subnets