AWS doesn’t employ “port forwarding,” instead it’s setup like a one-to-one straight NAT; Internal IP <-> External IP, but you do need to ensure both the External Address and Internal Networks are properly configured in Asterisk SIP Settings or it will have issues resolving (you can’t just set the External Address alone). The Internal Network is the VPC CIDR (and a VPN CIDR if using endpoint VPN) and can be autodetected with the Detect Network Settings button in most cases.
Chan_SIP tab also needs NAT = Yes.
We’ve found that you do usually need to also manually specify the External Address (but not the Local Network) on the Chan_PJSIP tab.
(@Anointedone, if you are using the AWS FreePBX AMI from TheWebMachine Networks, please feel free to reach out to us directly for support via our site. We provide one-on-one chat/email support as part of your subscription.)