These include: Network firewalls built into Amazon VPC, and web application firewall capabilities in AWS WAF let you create private networks, and control access to your instances and applications. Customer-controlled encryption in transit with TLS across all services.