Can a Public IP Be Added to a VPC-only Instance After Deployment?

No. A public IP address cannot be added to a VPC-only instance after it has been created.

When an instance is deployed as VPC-only, it is intentionally provisioned without any public network interface. This design enforces network isolation by ensuring the instance can communicate only over private IP addressing within the VPC and through approved network paths.

Because the public networking model is defined at creation time, it cannot be modified later. If your workload requires direct inbound access from the internet, you must either:

• Recreate the instance with a public IP enabled during deployment, or
• Keep the instance private and expose specific services using a NAT Gateway with port forwarding configured.