Application servers currently deployed in a private subnet require the ability to integrate with a third-party service accessible through the Internet.Which changes are required to provide outbound Internet connectivity in the VPC without providing inbound Internet connectivity to the application servers?