NAT gateway is used for one way internet connection between a private subnet and external network. External network cannot access the resource within the private subnet. (External requests blocked). e.g to update a VM driver.