Which security layer acts as a 'second line of defense' at the subnet level in an AWS VPC?

You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?

You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?

You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?

You need stateless firewall rules at the subnet level in your Amazon VPC. What should you configure?

You need to explicitly deny traffic from a specific IP address to your Amazon EC2 instances. Can Security Groups natively handle explicit deny rules?