The app server app runs in private-a with an instance profile for Session Manager.

1. Keep its id in ID:

   sh

   copy

   ID=$(aws ec2 describe-instances --filters Name=tag:Name,Values=app --query "Reservations[0].Instances[0].InstanceId" --output text)

2. Try to start a session with it, and read the error.

3. Give the private subnets a way out. The gateway goes in public-a:

   sh

   copy

   SUBNET=$(aws ec2 describe-subnets --filters Name=tag:Name,Values=public-a --query "Subnets[0].SubnetId" --output text)

4. Check the gateway until it is available.

5. The route goes in the private table:

   sh

   copy

   RT=$(aws ec2 describe-route-tables --filters Name=tag:Name,Values=private --query "RouteTables[0].RouteTableId" --output text)

6. Start a session with app again. Inside it, fetch a page from the internet and save it, then exit:

   sh

   copy

   curl -s https://example.com > /tmp/example.html