The instance has no public IP. Office routes use the syslog VPN gateway and other egress uses a NAT gateway. DLM targets the tagged data volume, and replacement detaches stop the instance first.
The README described the deployed AWS resources and how to deploy, but
never documented that this is a CDK (infrastructure-as-code) app or what
cdk.json is. Add an Infrastructure (CDK) section covering the app entry
point, the file-share stack, the cdk.json manifest and context cache, and
the synth/diff/deploy commands, so the IaC layer is discoverable.
CDK stack deploying a t4g.small EC2 instance with Samba and FileBrowser
for personal file storage over the site-to-site VPN. Includes 500 GiB
gp3 data volume with daily DLM snapshots.