Elastic Beanstalk - Public to Private Network

We're running Metabase via EB, current version, but on the older deprecated platform, database is not standalone yet. I want to put this behind a VPN (AWS Client VPN) so my thought is to just change the network setting in the Elastic Beanstalk config (load balancer config) - from Public visibility to Internal, and then change the cname.

Would this work, or do I need to rebuild this from the ground up?

Thanks

Hi @mikebee
It sounds like your question is not really specific to Metabase, so I think you might get better help on the AWS forum.