How it works...

When resources in the private subnet need to connect to services out on the internet, they send the requests through NAT. NAT forwards the requests to the internet and replaces the return address of the Elastic IP address assigned to it instead with the internal IP of the resource. Similarly, when a response comes back, NAT translates the address to the internal IP of the resource and forwards the response.