To convert an existing AWS EC2-classic infrastructure into a VPC orientated architecture. We need a multi-subnet (public and private) arrangement for web-servers, RDS instances and application/worker servers. Security groups, firewall, route tables etc need be set up according to server/subnet requirements e.g. application servers within the private subnet should not be internet accessible (further details to be supplied). Discussion and advice on best practises for accessing private subnet instances for maintenance will be required with possible application of these recommendations.