AWS VPC, Subnets, and Security Groups

What are the key trade-offs of AWS VPC, Subnets, and Security Groups? When would you choose it vs alternatives?

Answers use simple, clear English.