- NAT Gateway (IPv4 only, in public subnet)
- Allows private subnet IPv4 instances to access the internet
- Uses an Elastic IP (e.g.,
198.51.100.1
) - Blocks unsolicited inbound traffic
- Internet Gateway (IPv4 + IPv6)
- Allows public subnet instances full two-way internet access
- Required for public IPv4 and public IPv6 connectivity
- Egress-only Internet Gateway (IPv6 only)
- Allows private subnet IPv6 instances outbound-only access
- Blocks inbound IPv6 connections initiated from the internet
Route Tables
Public Subnet
Destination | Target |
10.0.0.0/16 | local |
2001:db8:1234:1a00::/56 | local |
0.0.0.0/0 | igw-id |
::/0 | igw-id |
Private Subnet
Destination | Target |
10.0.0.0/16 | local |
2001:db8:1234:1a00::/56 | local |
0.0.0.0/0 | nat-gateway-id |
::/0 | eigw-id |