Looking for some input on best practice for routing using pfSense in our AWS tenant.
Simple two subnet setup; one public(172.31.30.0/24), one private (172.31.31.0/24).
My current thought process is maintaining the private route table in AWS and setting the default route to point to pfSense private interface(172.31.31.254), rather than manually setting each instance to utilize pfSense directly within the OS. My concern is if I did it in the OS, those instances wouldn't communicate properly with AWS services like systems manager and such.
So, EC2 instance(172.31.31.10)>Subnet Gateway(172.31.31.1)>pfSense(172.31.31.254)>Out pfSense public interface to internet.
Is this the correct way to d