Ravi Sir's Cards › AWS
NAT egress and CIDRs
This revision card explains NAT egress and CIDRs. It starts from the need that s3 sees the public egress IP, not the private 10.x address. It describes allowlist NAT/firewall egress /32 or ranges; update when ISP changes. The how-to section notes test with curl from office vs phone hotspot. An example on the card is rahul Deshmukh updates policy after office ISP renumbers.
Read card text
What this card says
Why do we need it?
S3 sees the public egress IP, not the private 10.x address.
NAT
What is it?
Allowlist NAT/firewall egress /32 or ranges; update when ISP changes.
How to do it
Test with curl from office vs phone hotspot.
Example
Rahul Deshmukh updates policy after office ISP renumbers.