New vpc

[vincentsarago]

second take at #60

• add a custom VPC with public/private subnets and a Nat_gateway
• add a note why we put the db in a public subnet
• add Lambda in the private subnet so it can use the Nat_gateway

cc @sharkinsspatial

Note: I have this deployed on AWS and can confirm that the raster lambda can access the internet!