A NAT Gateway (Network Address Translation Gateway) is an AWS networking service that allows resources in a private subnet to access the internet without exposing them to inbound internet traffic.
With a NAT Gateway, private resources such as Amazon EC2 instances can download software updates, install packages, or access external services, while remaining protected from direct internet access.
In simple words, a NAT Gateway gives private resources internet access while keeping them secure from incoming connections.