@@ -40,16 +40,14 @@ For a high-level overview, see the [VPC Structure Confluence Page](https://nhsd-
4040
4141### Public HTTPS Request Flow
4242
43- 1 . External client makes HTTPS request → Internet Gateway
44- 2 . Request routes to Load Balancer or API Gateway in public subnet
45- 3 . Request forwards to Lambda (or other application) in private subnet
46- 4 . Lambda processes the request and returns response
47- 5 . Response returns to client through the same path
43+ 1 . External client makes HTTPS request to API Gateway
44+ 2 . Request forwards to Lambda (or other application) in private subnet
45+ 3 . Lambda processes the request and returns response
46+ 4 . Response returns to client through the same path
4847
4948### Outbound Internet Access
5049
51- - Lambda functions in private subnets can make outbound internet calls via NAT Gateways
52- - No direct inbound access to Lambda from the internet
50+ - No direct inbound or outbound access to Lambda from the internet
5351
5452### Internal-Only Traffic
5553
@@ -64,7 +62,6 @@ For a high-level overview, see the [VPC Structure Confluence Page](https://nhsd-
6462
6563### Network ACLs
6664
67- - ** Public subnets:** Allow HTTP (80), HTTPS (443), ephemeral ports
6865- ** Private subnets:** Allow VPC traffic and responses to outbound requests
6966
7067### Security Groups
@@ -74,8 +71,7 @@ For a high-level overview, see the [VPC Structure Confluence Page](https://nhsd-
7471
7572### Route Tables
7673
77- - ** Public subnets:** Route to Internet Gateway for external access
78- - ** Private subnets:** Route to NAT Gateways for outbound-only access
74+ - ** Private subnets:** Route to VPC Endpoints only
7975
8076---
8177
0 commit comments