Tag - vpc design

You likely have this setup already. App servers sit in private subnets, the database is locked down, and everything looks good on the diagram until someone...