A company is designing an internet-facing web application. The application runs on Amazon EC2 for Linux-based instances that store sensitive user data inAmazon ...

A company is designing an internet-facing web application. The application runs on Amazon EC2 for Linux-based instances that store sensitive user data inAmazon RDS MySQL Multi-AZ DB instances. The EC2 instances are in public subnets, and the RDS DB instances are in private subnets. The security team has mandated that the DB instances be secured against web-based attacks.
What should a solutions architect recommend?