Chapter 3 – VPC Network Security

1. Security groups.
2. Your NACL only allows incoming traffic. You need to open all the required ports for the outgoing traffic in the NACL.
3. ufw disable disables the firewall service. This is not recommended. Consult with your Linux administrator so that they can provide you with a command that will open the required ports instead of disabling the firewall.
4. The NACL or security groups are blocking the traffic, as can be seen by the REJECT action in the output.

5. The WAF Sandwich architecture approach.
6. Add a load balancer and put your EC2 instances in an autoscaling group. This will make sure that the instances can scale to handle the traffic when the spike occurs. Although you know the IP range, blocking the IP range would be wrong as you have not identified whether the traffic is legitimate or not.
7. Implement a CloudFront Distribution for the...