1.Why is the web tier placed in a public subnet while the Application and Database tiers are kept in private subnet?

Question

Christy Selva Kumar · Accepted Answer

Reduced attack surface. Attackers can only touch the web tier directly. To reach the database they'd have to break through two more layers.