Walk me through how you would secure a newly created AWS VPC that needs to host a public-facing web application and a private database for Empower.