AWS Security Cookbook

How to do it...

We can create an NACL with no SSH permission as follows:

1. Go to VPC service in the console.
2. Click on Network ACLs on the left sidebar.
3. Click on the NACL for our custom VPC and check its subnet associations. This should contain all the subnets of our VPC that are not associated with any other VPC.
4. Click on Create network ACL at the top of the page.
5. Provide a name in the Name tag field and select our custom VPC from the dropdown for the VPC field:

6. Click on Create to create the VPC. If we go to the NACL list, we will see that our new NACL doesn't have any subnets associated with it:

7. Select our new NACL and verify the inbound ...