Configure the NAT gateway for AWS IAM and the AWS CLI
Configure the NAT gateway for AWS IAM and the AWS CLI
Configure the NAT gateway to enable AWS IAM and the AWS CLI.
On an EC2 instance in your VPC, run the following commands to get the IP addresses of the AWS IAM and AWS CLI services:
nslookup iam.amazonaws.com
to get the IP address of the AWS IAM service
nslookup awscli.amazonaws.com
to get the IP address of the AWS CLI service
In the AWS Management Console, under
Services
, select
VPC
, and select your VPC.
Under
Resource map
, select the route table associated with the private subnet.
Click
Edit Routes
.
Click
Add route
to add a route to enable AWS IAM.
In the route entry, add the IP address of the AWS IAM service as the destination and select NAT Gateway as the target. You can also use a dynamic IP address like 44.216.0.0/16 as the destination since the IP address can change at any time.
Click
Add route
to add a route to enable the AWS CLI.
In the route entry, add the IP address of the AWS CLI service as the destination and select NAT Gateway as the target.