All inbound traffic is denied by default
However, all OUTBOUND is allowed by default.
So - if there is a need to ensure that the default VPC instances see no traffic - either inbound or outbound - then, an additional Firewall rule needs to be added. To DENY all outbound traffic from the VPC
I am passionate about getting cloud solutions right the first time. I help customers transition to the public cloud with the appropriate security controls and guardrails. GCP, AWS and Azure Security Specialist. <a href="https://calendly.com/anujvarma/google-cloud-architect-initial-consultation">Initial Consultation</a>