The official AWS docs state:
If you are connecting through an ISP or from behind your firewall without a static IP address, you need to find out the range of IP addresses used by client computers.
How can this even work? How does AWS know which address my router is giving me on my internal network?
I actually tried it out, by denying all access to an instance and then explicitly whitelisting:
- My public IP: This really does not give me access
- My private IP: Gets me access
Isn't this super weird? Couldn't anybody configure their home router to give them the same private IP and then be able to connect to my "protected" AWS instance?
I assumed that AWS wouldn't even see my private IP because of NAT?