Luckily, AWS has taken the approach where network access is off by default and users must specify rules in their security groups to allow traffic from specific IP addresses or ranges.