I’m architecting my cloud environment and considering all the possible security features and came across this scenario where I need to access an ec2 instance on a private subnet from the internet. If I make this possible then does that defeat the purpose of it being on a private subnet? If not then what is the benefit of this approach?