Architects place a public web tier and a private application tier in separate address ranges inside one VPC. Which VPC component creates that segmentation?
Select an answer to reveal the explanation.
Short Explanation
Subnets are like separate floors in the same building—one floor for the public lobby (web), another for back-office rooms (app) that stay off the street. IAM handles permissions, S3 stores objects, Cognito handles users—they do not carve up VPC IP space.
Full Explanation
Subnets partition a VPC’s CIDR into smaller segments so teams can separate tiers such as public web and private application layers. IAM roles grant permissions, Amazon S3 provides object storage, and Amazon Cognito manages authentication—none create IP network segments inside a VPC.