Ensure that an Elastic IP (EIP) is allocated for each NAT gateway that you want to deploy within your AWS account. An EIP address is a static, public IP address designed for dynamic cloud computing. You can associate an AWS EIP address with any EC2 instance, VPC ENI or NAT gateway. A Network Address Translation (NAT) gateway is a device that helps enabling EC2 instances in a private subnet to connect to the Internet and prevent the Internet from initiating a connection with those instances. With Elastic IPs, you can mask the failure of an EC2 instance by rapidly remapping the address to another instance launched in your VPC.
To be able to use AWS NAT gateways that allow Internet access from the private subnet of your VPC, make sure that an Elastic IP is allocated for each NAT gateway that you want to deploy.
To determine if there are any Elastic IPs (EIPs) allocated for the NAT gateways available within your AWS account, perform the following actions:
Remediation / Resolution
To allocate an AWS Elastic IP for each NAT gateway that you want to deploy within your VPC, perform the following actions:
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
You are auditing:
Allocate Elastic IPs for NAT Gateways
Risk level: Medium