An asset can be considered as "External Facing" in 2 cases:

  1. If the assets' Security group defined as External Facing on the AWS side.

  2. If the assets IP is not internal. i.e NOT one of the following IPs:

Range from 10.0.0.0 to 10.255.255.255 — a 10.0.0.0 network with a 255.0.0.0 or an /8 (8-bit) mask

Range from 172.16.0.0 to 172.31.255.255 — a 172.16.0.0 network with a 255.240.0.0 (or a 12-bit) mask

A 192.168.0.0 to 192.168.255.255 range, which is a 192.168.0.0 network masked by 255.255.0.0 or /16
Did this answer your question?