Continuous Deployment to EC2 instances in Private Subnet

Hi
What are the recommended ways to get CircleCI to deploy docker containers/builds in EC2 instances in a private subnet in AWS which only has outgoing access to the internet through a NAT gateway.

Thanks,