AWS VPC, Subnets, and Security Groups

Compare AWS VPC, Subnets, and Security Groups with a common alternative (angle 3). How do you decide in a design review?

Answers use simple, clear English.