Before launching EC2 instance for control-plane, we have to create subnet for Internet Access.
Create Subnet, Route Table, NAT Gateway for Private EC2 instance to connect to Internet
To setup private Roost Controlplane, follow below mentioned steps to create private subnet with NAT gateway attached. This prevents external (internet) traffic to reach to private instance instead allows private EC2 instance to connect with internet (one-way). Observe below diagram for reference
...
The Private Subnet with Internet is ready and we can now start our control-plane in the same VPC and Subnet.