Ravi Sir's Cards › AWS
Why allowlist NAT not 10.x?
This interview card answers: Why allowlist NAT not 10.x? S3 sees the public egress address after NAT, not the private RFC1918 IP. Update policy when egress IP changes. Only 203.0.113.10/32 works for that NAT.
Read card text
What this card says
What it is
S3 sees the public egress address after NAT, not the private RFC1918 IP.
NAT
Why it matters
Update policy when egress IP changes.
How / example
Only 203.0.113.10/32 works for that NAT.