How to deny all outbound traffic from an AWS EC2 Instance using a Security Group?

Question

I am trying to set an AWS Security Group egress rule which blocks all outbound traffic. It has been known that by default, security groups allow all outbound traffic.

I am using AWS CloudFormation and how should we define the appropriate security egress rule?

user_18221624 · Answer

Security groups aren't intended to block the traffic. They are permissive in nature. If you want to block the outbound traffic on certain IP/Range then use Access Control on VPC which will block or allow ingress or outgress traffic according to your rules.

How to deny all outbound traffic from an AWS EC2 Instance using a Security Group?

4 Answers