EC2 agent cannot connect to external resources

I have a running TC server using Docker, which uses a cloud profile to auto spin an EC2 AMI when build is required.

I have tried to get git clone to work, which goes to github.com. I keep getting an error stating the agent cannot reach github.

If i run the checkout to the server, git works, so i know the token config for github is all good.

If i log into a running agent instance, i cannot ping externally

Any ideas?