mediumNewGoldman SachsJPMorgan ChaseIBM

Security wants egress from the VPC inspected and limited to approved destinations. What are the realistic options?

Allow-listing egress starts free with security groups and ends with TLS-breaking appliances. Each rung costs latency, money and political capital, and knowing where to stop is the actual test.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Allow-listing egress starts free with security groups and ends with TLS-breaking appliances. Each rung costs latency, money and political capital, and knowing where to stop is the actual test.

20 answers per topic instead of 10, and your progress kept · no cardor unlock all 390 remaining answers · ₹2,000 / $25

UP NEXT ON YOUR JOURNEY

Next in this trackAfter going active-active across two regions, orders disagree between them. What broke, and how is this done properly?Next in this trackYour data transfer line is now the third largest on the bill. Where is it coming from and what do you do?Next in this trackCompliance will not allow model API calls over the public internet. What are your options?

DISCUSSION · 0

Nothing here yet. Say how you would answer it.