Check your security group. That was my issue. I needed a security group attached to the infrastructure config with an ingress rule from vpc cidr to all ports.