would you mind elaborating on the nat gateway part? are you insinuating that nat gateway as mean to provide oneway internet access for instances in private subnets are misguided or suboptimal?
https://www.lastweekinaws.com/blog/an-alternat-future-we-now...
I wouldn't use it in production (some companies do, for internal things) but the very fact it exists speaks volumes.