Yup, in my experience, you can launch an instance and it will either be assigned a private IP from the subnet assigned to your VPC and then you can associate a public IP with it after (NAT essentially ...