An egress point for a private subnet to communicate with the outside securely.
It provides a one-way path that blocks intrusion from outside while allowing outbound traffic from inside. Placing one per availability zone for redundancy is the recommended configuration.
© 2026 ITBGM