How to configure SG for EC2 if the server is behind a balancer and access should only be from a private openvpn network?

Question

Amazon Web Services

The situation is as follows:


1. I set up an OpenVPN server: all traffic, except for internal networks, is ignored, that is, all requests that do not concern internal networks are sent to Google DNS
2. I set up qa environment (ELB, ASG)

Now I'm puzzled over how to configure either openvpn or SG so that port 443 on EC2 that belong to ASG is opened only from the VPN network when accessing the balancer.

Answer 1

If I understood the question correctly, it is very simple - in SG for ELB, allow 443 for source == VPN server