What AWS architecture for Jira & Confluence using SSL

[M Amine]

Hi,

We are planning to deploy Jira, Confluence and Crowd (server, not Data Center) on AWS. 

Jira and Confluence have to use SSL. So we are faced with two options:

1. Option 1:
   1.  Deploy a reverse proxy (like nginx for eg.) on an EC2 instance on a public subnet 
   2. + Configure nginx to use SSL (according to Atlassian documentation)
   3. + Add a NAT Gateway in order to connect the public subnet to the private subnet
   4. + Use Jira, Crowd & Confluence and Database (RDS) on a private subnet 
2. Option 2:
   1. Use a NAT GATEWAY on a public subnet 
   2. + Use Jira, Crowd & Confluence on a private subnet and configure Jira, Crowd & Confluence to use SSL

Cann't really say what is the best option. 

Any thoughts? Share your experience :)

kind regards