Is there a recommended "best practice" for deploying multi-tiered web applications into AWS as it relates to public and private subnets? Most of the documentation, including AWS' suggest public for ELB and EC2, with private for RDS. But I've also seen it suggested that public for ELB and all web and database servers in private.