Ephemeral Ports: The Silent Rule You’re Probably Missing in Your AWS NACL

Why your custom Network ACL blocks return traffic — and how to fix it with one Terraform resource block.