When assign_public_ip is set to no instances should be provisioned in the private subnet of a VPC

When assign_public_ip is set to no instances should be provisioned in the private subnet of a VPC. Public should only be used for instances that need an EIP. Private should be used for instances that will be using NAT.