We’ve hosted word press on AWS EC2 instance (Private subnet), and it’s attached to AWS application load balancer(Internet facing), then it’s attached to AWS cloud front, our website is pointing to AWS cloud front.