Question
In AWS, for VPCs, when you add a route in your route table to direct traffic to IGW (Internet Gateway), you do it in a custom route table (not the Main one) and attach the Route Table to your public subnet(s). Why do you not add the route to your Main route table?
Answer
If you add the route to your IGW in the main Route Table, then all new subnets that get created are by default associated with the Main Route Table so they become public subnets by default which is security risk.