aws more_solution blocking Solutions NACL: at VPC level SG: instance level Optional firewall software in EC2 ALB: SG of ALB WAF at ALB CloudFront: WAF Notes: No security group for NLB