Private Subnet Deployments Losing Outbound Access
Problem Statement
Instances in a private subnet were healthy from an infrastructure perspective but could no longer reach package repositories, monitoring agents, or container registries. The issue surfaced during an otherwise successful rollout and pointed to a subtle routing and NAT dependency mismatch.