Network Diagram PBQs: AWS Certified Solutions Architect - Associate (SAA-C03)

You are a solutions architect designing a standard three-tier VPC for a web application. The VPC has three subnets: a Public Subnet for internet-facing resources, a Private Subnet for application logic that should not be directly reachable from the internet, and a Data Subnet for database instances that must be fully isolated. An Internet Gateway and a web server are already in place. Assign the remaining AWS resources to the correct subnets based on their roles and the principle of least privilege network access.