diff --git a/examples/aws-two-tier/main.tf b/examples/aws-two-tier/main.tf
index b06bf8f80e..2a8957e661 100644
--- a/examples/aws-two-tier/main.tf
+++ b/examples/aws-two-tier/main.tf
@@ -24,6 +24,14 @@ resource "aws_security_group" "default" {
         protocol = "tcp"
         cidr_blocks = ["0.0.0.0/0"]
     }
+
+    # outbound internet access
+    egress {
+        from_port = 0
+        to_port = 0
+        protocol = "-1"
+        cidr_blocks = ["0.0.0.0/0"]
+    }
 }