There's more...

By default, all user created subnets are private subnets. If we want resources to be accessed from the internet directly, we need to create an IG and attach it to the VPC. The IG needs to be attached to the route table of the subnet that hosts the resources. If we attach an IG to the route of the subnet, it becomes a public subnet.