This session explores proven methods for enhancing workload security through outbound security controls using AWS Network Firewall and Amazon Route 53 DNS Firewall. Jesse Clinton from AWS and Paul Radulovic from Robinhood discuss the importance of egress security, its implementation, and best practices. They cover the benefits of using managed services like DNS Firewall and Network Firewall to filter traffic, detect anomalies, and prevent threats. The presentation includes insights into Robinhood's journey in implementing egress security, highlighting practical steps and lessons learned. Key topics include the concept of defense in depth, the value of visibility in network traffic, and cost optimization strategies. The speakers emphasize the importance of a balanced approach to security, combining managed rules with custom policies to achieve effective protection without overly restricting legitimate traffic.