How would you configure VPCs, security groups, and network traffic flow to secure a cloud application?