Attempting to following https://aws.amazon.com/premiumsupport/knowledge-center/nat-gateway-vpc-private-subnet/ , I have the following components:
- NAT Gateway
nat-aaa
- Subnet
subnet-aaa
configured to hostnat-aaa
- Route Table
rtb-bbb
configured with route:0.0.0.0/0
->nat-aaa
- Subnet
subnet-bbb
configured to use route tablertb-bbb
- EC2 instance
id-ccc
insubnet-bbb
id-ccc
has a public IP, however whilst applied to subnet-bbb
I am unable to make any connections directly do it via the public IP. Is an additional route needed on rtb-bbb
to allow this? I was understanding that route tables are more of an outbound configuration and not responsible for inbound connections?
All subnets are using the same Network ACL, which is the VPC default of allow all inbound.
id-ccc
is actually just 1 instance to simplify the example, actually I have a variable number of instances (usually around 9), each of which I need to SSH to.