Skip to content

EC2 VPC Block Public Access settings should block internet gateway traffic

0

We have a NAT Gateway configured for our private subnet with a route table entry 0.0.0.0/0 → NAT Gateway. Security Hub recommends enabling the EC2 VPC Block Public Access settings to block Internet Gateway traffic. Will enabling this setting impact our current setup, where private instances access the internet via the NAT Gateway?

asked a year ago291 views

1 Answer
1

Before blocking the public access you should read this https://aws.amazon.com/blogs/networking-and-content-delivery/vpc-block-public-access/ explaing how it works and what options you have. In short, if you would just block all public access it would also block access via existing NAT gateway (not what you want). But you can block public ingress or make exceptions for resources that need to be accessible from the internet. And don't start with your production VPC but test first somewhere where you can affort some trial & errors.

EXPERT

answered a year ago

EXPERT

reviewed a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.