• In AWS, you can set up Security Groups on instances to allow certain traffic
• You can set up higher-level firewalls as well
• For Security Groups, you say where can traffic come from...
• ... and where can it go
• Traffic is denied by default (least privilege!)

4 / 26