devops video for an application is hosted in an Auto Scaling group of Amazon EC2 instances with public IP addresses in a public subnet. The instances are
An application is hosted in an Auto Scaling group of Amazon EC2 instances with public IP addresses in a public subnet. The instances are configured with a user data script which fetch and install the required system dependencies of the application from the Internet upon launch. A change was recently introduced to prohibit any Internet access from these instances to improve the security but after its implementation, the instances could not get the external dependencies anymore. Upon investigation, all instances are properly running but the hosted application is not starting up completely due to the incomplete installation. Which of the following is the MOST secure solution to solve this issue and also ensure that the instances do not have public Internet access?