
You could use iptables rules to restrict outbound traffic based on a predefined destination port or IP address. To meet these needs, you may decide to implement third-party Independent Software Vendor software solutions on EC2 instances.

However, these services don’t provide the advanced traffic filtering features that your business might require, such as trojan, web, and malware filtering. NAT gateways are used to allow resources in private subnets egress access to the internet. Amazon Virtual Private Cloud (VPC) network security features, such as security groups and network ACLs help build a layered network defense for your VPC.

In AWS, you have many options for egress traffic filtering. This is also known as “egress filtering.” AWS customers need control over, and the ability to filter, requests that are initiated by resources in private and public subnets and sent to the internet. Regardless of size or industry, it’s common for organizations to have security and compliance rules for securing internet-bound traffic.
