Explain how you would secure a complex VPC setup containing both public-facing applications and internal databases for Intuit workloads.