Cover the right column. Say the fact before you reveal it.
One line per term, spanning the whole deck.
TermThe one fact
VPC PeeringDirect, private, never transitive
NAT GatewayZonal — one per AZ, not one for the whole VPC
Gateway endpointS3/DynamoDB only, free, a route table entry
NLBThe only load balancer PrivateLink sits behind
Transit Gateway100 VPCs = 100 attachments, not 4,950 connections
Direct Connect resiliencyLocation diversity first, connection count second
PrivateLinkOne-directional — provider can never reach consumer
VPC LatticeLayer 7, IAM auth, ~43% cheaper than PrivateLink+NLB
Global AcceleratorAny TCP/UDP — CloudFront is HTTP-only