How do I allow resources in a VPC to communicate with the internet by creating and attaching an internet gateway to the VPC?
In order for the resources in a VPC to send and receive traffic from the internet, the following must be true:
- An internet gateway must be attached to the VPC.
- The route tables associated with your public subnet (including custom route tables) must have a route to the internet gateway.
- The security groups associated with your VPC must allow traffic to flow to and from the Internet.
- Any instances in the VPC must either have a public IP address or an attached Elastic IP address.
You can find instructions for each of these steps at Creating a VPC with an Internet Gateway.