Your application server instances are located inside your VPC's private subnet. These instances must have Internet conne

[answerhappygod]

Your application server instances are located inside your VPC's private subnet. These instances must have Internet connection to a Git repository. You construct a NAT gateway in your VPC's public subnet. The NAT gateway is able to access the Git repository, however instances on the private subnet are unable to do so. You verify that the private subnet route table has a default route to the NAT gateway. All communication to the NAT gateway is permitted via the security group for your application server instances.

Which configuration changes should you make to allow these instances to communicate with the patch server?

A. Assign public IP addresses to the instances and route 0.0.0.0/0 to the Internet gateway.
B. Configure an outbound rule on the application server instance security group for the Git repository.
C. Configure inbound network access control lists (network ACLs) to allow traffic from the Git repository to the public subnet.
D. Configure an inbound rule on the application server instance security group for the Git repository.