add an internet gateway to the VPC and make sure EC2 instances in the ASG are assigned public IPs