How to implement the following security requirements using: AWS EC2, VPC, AWS S3, EBS, Elastic Load Balancing and CloudWatch, Auto Scaling

AWS CLI Commands

for users on the Internet which can ping any host in the public subnet, but they cannot ping any host in the private subnet.

for users in the private subnet can ping any host in the public subnet and any host in the private subnet, but they cannot ping any host on the Internet.

for users in the public subnet can ping any host on the Internet and any host in the public subnet, but they cannot ping any host in the private subnet.