Enhancing VPC Security with Amazon VPC Block Public Access

AWS has introduced Amazon VPC Block Public Access, a new feature designed to enhance VPC security by providing more granular control over internet access in AWS networks.

• Allows centralized blocking of incoming and outgoing VPC internet traffic through AWS-provided paths
• Provides three main modes of access control:
  • Bidirectional block (all internet traffic blocked)
  • Ingress-only block (inbound traffic blocked)
  • Granular exclusions for specific VPCs or subnets
• Can be configured per region on an AWS account
• Supports both IPv4 and IPv6 traffic management
• Ensures only NAT Gateways and Egress-Only Internet Gateways can provide internet access when certain modes are enabled
• Stateful when used in ingress-only mode, automatically permitting return traffic for allowed connections

The feature helps organizations improve their cloud security posture by providing a simple, declarative method to control internet access across their VPC infrastructure.