Can Jenkins master connect to a slave node in a private subnet?
As described in Jenkins documentation https://jenkins.io/doc/book/managing/security/#jnlp-tcp-port, you need to configure:


Jenkins to use fixed TCP port for JNLP agent, for instance 39057
AWS loadbalancer to listen on port 39057 and forward it to Jenkins on same port