I have amazon VPC set through wizard as \"public only network\", so all my instances are in public subnet.
Instances within VPC that have Elastic IP assigned connect
It appears that the only way to get outside from instances that don't have Elastic IP is:
So, just adding NAT is not enough. Instances should be stopped and moved to another IP from another subnet.