Posted On: Nov 17, 2022

Starting today, you can choose the private IP address that your NAT Gateway uses for network address translation.

A NAT Gateway enables instances in a private subnet to connect to services outside the subnet using the NAT Gateway’s IP address. NAT Gateway uses its private IP address to perform network address translation when used for private communication with other VPCs or on-premises environments via Transit Gateway or Virtual Private Gateway. Before this launch, your NAT Gateway would select a random private IP address from the subnet it is created in. As a result, customers who use NAT Gateway to access their partner networks were required to allowlist the entire subnet CIDR of the NAT Gateway. This enhancement allows you to select a specific private IP address for your NAT Gateway from the subnet and allowlist that specific IP address with the partner network.

This feature is available in all AWS commercial and AWS GovCloud (US) Regions. To learn more about VPC NAT Gateway and this feature, please visit our documentation.