Every public IP on an EC2 instance exists for one of two reasons: the instance serves the internet, or somebody needs to SSH into it. The second reason stopped being valid years ago, and it is still the most common one we see.




The problem


Instances get a public IP so an engineer can reach them over SSH. That single decision drags a...