EC2 Instance Will not connect to internet: Difference between revisions

From Cramsession
Jump to navigationJump to search
✍️ Verified Author: MflavellClick to view professional profile & credentials
(Created page with "= Check the Following = == Internet Gateway == * Check the subnet has an Internet gateway * Check the internet gateway is associated with the subnet ** This will make the subnet a public subnet. * You will not need a NAT gateway if this is a public subnet. == Check the NACL == * Remember the NACL is stateless * Make sure you have a rule to allow: ** All traffic outbound ** All traffic inbound * If you want to harden the subnet after this change, then revert...")
 
No edit summary
 
(8 intermediate revisions by the same user not shown)
Line 1: Line 1:
= Check the Following =
= Check the Following =


Line 7: Line 8:
* Check the internet gateway is associated with the subnet
* Check the internet gateway is associated with the subnet


** This will make the subnet a public subnet.
:* This will make the subnet a public subnet.


* You will not need a NAT gateway if this is a public subnet.
* You will not need a NAT gateway if this is a public subnet.
Line 15: Line 16:


* Remember the NACL is stateless
* Remember the NACL is stateless
:* It must have matching sets of rules


* Make sure you have a rule to allow:
* Make sure you have a rule to allow:


** All traffic outbound
:* All traffic outbound
 
:* All traffic inbound


** All traffic inbound


* If you want to harden the subnet after this change, then revert back to only the needed traffic.
{{{After this change is made, change it back after the internet download.}}}


* Overley permissive NCAL could result in the exfiltration of data
''The NACL will provide an additional layer of security.''

Latest revision as of 22:36, 16 May 2026

Check the Following

Internet Gateway

  • Check the subnet has an Internet gateway
  • Check the internet gateway is associated with the subnet
  • This will make the subnet a public subnet.
  • You will not need a NAT gateway if this is a public subnet.


Check the NACL

  • Remember the NACL is stateless
  • It must have matching sets of rules
  • Make sure you have a rule to allow:
  • All traffic outbound
  • All traffic inbound


{{{After this change is made, change it back after the internet download.}}}

The NACL will provide an additional layer of security.