Setting up an EKS Node Group on a private subnet

Thanks, Andrii. All three are checked. However, the problem still persists.

1. Yes

$ aws ec2 describe-nat-gateways --nat-gateway-ids <my-nat-gateway-id> --query 'NatGateways[].NatGatewayAddresses[].PublicIp'
[
    "<correct-public-ip>"
]

2. Yes

$ aws ec2 describe-vpc-attribute --vpc-id <my-vpc-id> --attribute enableDnsSupport 
{
    "VpcId": "<my-vpc-id>",
    "EnableDnsSupport": {
        "Value": true
    }
}

$ aws ec2 describe-vpc-attribute --vpc-id <my-vpc-id> --attribute enableDnsHostnames
{
    "VpcId": "<my-vpc-id>",
    "EnableDnsHostnames": {
        "Value": true
    }
}

3. Yes, the security group of the the autoscaling group associated with the node group has both inbound and outbound allowing 0.0.0.0/0 all protocol, all port range, all type.