Which component is attached to a VPC to allow a web server placed in a public subnet to communicate bidirectionally with the internet?