An Administrator has an Amazon EC2 instance with an IPv6 address.The Administrator needs to prevent direct access to this instance from the Internet.The Administrator should place the EC2 instance in a:
Private Subnet with an egress-only Internet Gateway attached to the subnet and placed in the subnet Route Table.
Public subnet with an egress-only Internet Gateway attached to the VPC and placed in the VPC Route Table.
Private subnet with an egress-only Internet Gateway attached to the VPC and placed in the subnet Route Table.
Public subnet and a security group that blocks inbound IPv6 traffic attached to the interface.
I figure that the answer is:
Private subnet with an egress-only Internet Gateway attached to the VPC and placed in the subnet Route Table.