How many NAT Gateways are needed and where should they be placed in an HA design?

In HA design (High Availability), it is recommended to have at least one NAT Gateway in each Availability Zone (AZ) to ensure fault tolerance.

Reasons:

• NAT Gateway is a managed service that provides internet access for resources in private subnets.
• If the NAT Gateway is only located in one AZ, resources in other AZs will lose internet access if that AZ fails.

Recommendation:

• Create a NAT Gateway in each AZ that has private subnets.
• Configure routing tables for private subnets so that traffic exits through the local NAT Gateway in the same AZ.

This approach ensures fault tolerance and minimizes latency when accessing the internet.