Centrally manage VPC network ACL rules to block unwanted traffic using AWS Firewall Manager

This article discusses how to use AWS Firewall Manager to centrally manage network ACL rules for VPC subnets across AWS accounts within an organization. It allows you to define common rules to deny inbound or outbound traffic based on IP addresses, ports, or protocols.

Specifically, the article covers:

• Denying inbound traffic from a public IP range using network ACL security policies
• Denying outbound traffic to specific ports like LDAP (389) used by malware or exploits
• Setting up policy scope, remediation actions, and resource cleanup
• Working with network ACLs managed by Firewall Manager and potential service control policies