A company has instances in private subnets that require outbound access to the internet.This requires: