Standard best-practice vpc and HA nat