Status: IN
Complete VPC security requires coordinating three independent control planes — network segmentation (NACLs + security groups), policy isolation (Block Public Access + resource policies), and service connectivity (PrivateLink + VPC endpoints) — a gap in any one plane undermines the others.