My problem is easily connecting via SSH to EC2 instances that do not have a public IP (i.e. db instances, web instances, etc.).
I found that one can use iptables
PREROUTING chain to forward SSH traffic based on incoming port on the the server with a public IP. So I thought I could use my load balancer for forwarding SSH across my private instances. However, this seems like a pretty big security hole since my private instances now became potentially exposed to SSH-based attacks.
Is there any other way to conveniently SSH into EC2 instances with private IPs only?