Too permissive, should apply principle of least privilege. I feel better about it from inside the private subnet.