EC2 Instance Will not connect to internet: Difference between revisions

From Cramsession
Jump to navigationJump to search
✍️ Verified Author: MflavellClick to view professional profile & credentials
(Created page with "= Check the Following = == Internet Gateway == * Check the subnet has an Internet gateway * Check the internet gateway is associated with the subnet ** This will make the subnet a public subnet. * You will not need a NAT gateway if this is a public subnet. == Check the NACL == * Remember the NACL is stateless * Make sure you have a rule to allow: ** All traffic outbound ** All traffic inbound * If you want to harden the subnet after this change, then revert...")
 
No edit summary
Line 15: Line 15:


* Remember the NACL is stateless
* Remember the NACL is stateless
** It must have matching sets of rules


* Make sure you have a rule to allow:
* Make sure you have a rule to allow:
Line 22: Line 24:
** All traffic inbound
** All traffic inbound


* If you want to harden the subnet after this change, then revert back to only the needed traffic.


* Overley permissive NCAL could result in the exfiltration of data
''After this change is made, change it back after the internet download.''
 
''The NACL will provide an additional layer of security.''

Revision as of 23:12, 21 December 2024

Check the Following

Internet Gateway

  • Check the subnet has an Internet gateway
  • Check the internet gateway is associated with the subnet
    • This will make the subnet a public subnet.
  • You will not need a NAT gateway if this is a public subnet.


Check the NACL

  • Remember the NACL is stateless
    • It must have matching sets of rules
  • Make sure you have a rule to allow:
    • All traffic outbound
    • All traffic inbound


After this change is made, change it back after the internet download.

The NACL will provide an additional layer of security.