Ensure VM Instance should not have public IP

Instances with public IP address can leak private information to the entire internet or allow unauthorized data tampering / deletion. Public Facing Services should be behind WAF, ELB and other protection mechanisms.