We realized after investigation that some dataprep instance is created with public IPs. We read all the documentation and couldn't find any way to create an instance without public IP.