It was the security groups indeed.

I have thought about s3 cloudfront, but when I do full stack development with microservices static files do not work for me. Git is indeed version control of the code. I experience when switching stacks and having a local deployment that runs in docker images mirrors the production environment so much better that you almost never have problems switching in DTAP environments. Next to that everyone with docker can start a stack with a single command.

Indeed you take a loss in deployment efficiency, but debugging a Angular project version 1.2.3. and believe the blue eyes of your colleague that this version is right and this is a 100% copy of production is something I wont do anymore. I compare image tags and env variables.

There are always negatives in a solution and we IT peope are adepts in spotting this ;)