EC2 Instances not reachable from Internet

Question

When I create EC2 instances they are not accessible from the internet. This happens with the default VPC and a custom VPC I created. I have an internet gateway in the VPCs this has been tried in. I get a public IP address assigned to the instance. The route table and the security policy allow all traffic and the gateway is mapped in the route table as well. These are common instances such as the amazon linux and ubuntu instances.

I thought maybe my VPC was the issue, but the Default VPC should work by default, is that a correct assumption?

Accepted Answer

The Default VPC Security group only allows access from its self.
You will need to update the appriopiate security group to allow inbound traffic to the port in question from the CIDR you require.

If you could share more details about your security groups etc, this would help

Thanks

Answer

Please use the [VPC Reachability Analyzer](https://docs.aws.amazon.com/vpc/latest/reachability/what-is-reachability-analyzer.html) to troubleshoot this issue.

Answer

Default VPC sg is Literally Default VPC sg. AWS best practice is make custom sg for each workload environment and required policy. When you make sg with right policy for your situation (for example allow specific source IP/Any IP with specific destination service port to reach your instances)than put this on your instance.

EC2 Instances not reachable from Internet

Relevant content