It’s quite straight forward when creating an NAT instance for a private subnet in AWS, eg. search for amzn-ami-vpc-nat-hvm for the AMI then launch it into a public subnet. However I need to disable source/destination check before the NAT instance becomes available in the drop down list of destinations of a route table: 🙂