For networking consistency and ease of management of EC2 instances,
Amazon offers the Virtual Private Cloud (VPC). A VPC is apportioned
from the AWS public cloud, and is assigned a CIDR block from the
private network space (RFC 1918). Within a VPC, you can carve public/private
subnets for your needs and deploy the applications on EC2 instances
within those subnets. To then enable access to the applications
within the VPC, you can deploy the VM-Series firewall on an EC2 instance.
The VM-Series firewall can then be configured to secure traffic
to and from the EC2 instances within the VPC.