A healthcare company is planning to use AWS for storing and processing confidential patient data. Which network design feature ensures that the data is not exposed over the public internet?