This is for egress, because we need to reach the outside world to do apt-updates to install the JRE and to get the ec2 tools.