AWS VPC, Subnets, and Security Groups

What common mistakes do candidates make around AWS VPC, Subnets, and Security Groups, and how do you avoid them?

Answers use simple, clear English.