network ACL (cloud)
acronymThe stateless subnet-level filter in cloud networks: numbered allow and deny rules evaluated in order, both directions filtered independently.
Stateless means return traffic needs its own rule - the classic NACL lesson, learned once per engineer.