@jacovangelder yes, I have whitelisted control plane IP's inbound and outbound.
 ap-south-1  65.0.37.64/28, 13.232.248.161