hands-on lab

Configuring a Network Address Translation Amazon Machine Image

Up to 1h
Get guided in a real environmentPractice with a step-by-step scenario in a real, provisioned environment.
Learn and validateUse validations to check your solutions every step of the way.
See resultsTrack your knowledge and monitor your progress.


Network Address Translation (NAT) is used to allow EC2 instances in a private subnet to connect to services outside of your VPC. NAT instances are EC2 instances that have been configured to perform NAT on all traffic leaving the private subnet.

Amazon Machine Images (AMIs) can be used to create EC2 instances with pre-configured software.

In this lab, you will configure a NAT instance to allow internet access for EC2 instances in a private subnet. You will also create an Amazon Machine Image (AMI) of the NAT instance.

Learning objectives

Upon completion of this beginner-level lab, you will be able to:

  • Configure an Amazon EC2 instance to perform Network Address Translation (NAT)
  • Create an Amazon Machine Image (AMI) based on an EC2 instance

Intended audience

  • Candidates for AWS Certified Solutions Architect – Associate & Professional Certifications
  • Cloud Architects
  • DevOps Engineers
  • Software Engineers


Familiarity with the following will be beneficial but is not required:

  • Amazon Virtual Private Cloud (VPC)
  • Amazon EC2
  • Amazon Machine Images (AMIs)
  • Linux

The following content can be used to fulfill the prerequisites:

Environment before

Environment after

About the author

Jun Fritz, opens in a new tab
Cloud Labs Developer
Learning paths

Jun is a Cloud Labs Developer with previous experience as a Software Engineer and Cloud Developer. He holds the AWS Certified Solutions Architect and DevOps Engineer Professional certifications. He also holds the AWS Certified Solutions Architect, Developer, and SysOps Administrator Associate certifications. 

Jun is focused on giving back to the growing cloud community by sharing his knowledge and experience with students and creating engaging content. 

Covered topics

Lab steps

Logging In to the Amazon Web Services Console
Exploring an Existing Amazon VPC and Network Address Translation
Connecting to a Private Amazon EC2 Instance Using a Bastion Host
Configuring an Amazon EC2 Instance to Perform Network Address Translation
Creating the Network Address Translation Amazon Machine Image