CE AWS Cloudformation Stack with NAT Gateway instead of Internet Gateway

Hi,

My company’s security policy does not allow us to use an internet gateway for an AWS ec2 instance to go to the internet directly. Therefore the Docker CE Cloudformation stack fails because it is creating an external load balancer to exit into the internet to access the AWS ECS service.

I heard that using a NAT gateway can safely allow this to happen using our public subnets of our VPC.

Please help adjust the Docker stack for CE that “Uses our own VPC” format to replace the internet gateway and external load balancer with the NAT Gateway. I do not know how this is done. Without this fix, our stack always fails.

Thank you.