For a company using AWS, which configuration would be the most cost-effective for providing internet access to private subnets in their VPC?