...
Please note Roost has other configurations:
EAAS Server can be in a public subnet (default)
AWS ALB can be in private subnet as well
Overall
...
Flow of Roost
User Browser → Route53 → ALB → Target-Group → EC2 → Roost Application
Roost Application → EAAS Server → Launch Ephemeral Environments
Roost Application → JumpHost Server → Connect to User or Managed Clusters like EKS, GKE, AKS
...