NAT Gateway

Problem

Private cloud servers need outbound Internet access. But you don't want every server to have its own public IP or accept inbound Internet connections.

Solution — NAT Gateway

Private workloads send outbound traffic through a shared translation point.

Private servers
      ↓
NAT Gateway
      ↓
Internet

Replies return through the established translations.

Core idea: a NAT gateway provides controlled outbound Internet connectivity for private workloads.