<mxfile host="app.diagrams.net">
  <diagram name="Page-1" id="BdqRRZmEDIPSy5E7-0wz">
    <mxGraphModel grid="1" page="1" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" pageScale="1" pageWidth="827" pageHeight="1169" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <mxCell id="GyzbsZ9NTCDikXR92pf4-1" parent="1" style="rounded=0;whiteSpace=wrap;html=1;dashed=1;dashPattern=8 4;strokeColor=#2563eb;fillColor=none;fontColor=#7E7E7E;fontStyle=1;fontSize=14;verticalAlign=top;spacingTop=10;arcSize=15;" value="Outbound Control Layers (defense-in-depth)" vertex="1">
          <mxGeometry height="1040" width="620" x="104" y="40" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-4" parent="1" style="sketch=0;points=[[0,0,0],[0.25,0,0],[0.5,0,0],[0.75,0,0],[1,0,0],[0,1,0],[0.25,1,0],[0.5,1,0],[0.75,1,0],[1,1,0],[0,0.25,0],[0,0.5,0],[0,0.75,0],[1,0.25,0],[1,0.5,0],[1,0.75,0]];outlineConnect=0;fontColor=#7E7E7E;fillColor=#8C4FFF;strokeColor=#ffffff;dashed=0;verticalLabelPosition=middle;verticalAlign=middle;align=left;html=1;fontSize=12;fontStyle=1;aspect=fixed;shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.route_53;labelPosition=right;" value="&amp;nbsp;Route 53 DNS Firewall&lt;br&gt;&amp;nbsp;(domain-based filtering)" vertex="1">
          <mxGeometry height="78" width="78" x="375" y="440" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-5" parent="1" style="sketch=0;points=[[0,0,0],[0.25,0,0],[0.5,0,0],[0.75,0,0],[1,0,0],[0,1,0],[0.25,1,0],[0.5,1,0],[0.75,1,0],[1,1,0],[0,0.25,0],[0,0.5,0],[0,0.75,0],[1,0.25,0],[1,0.5,0],[1,0.75,0]];outlineConnect=0;fontColor=#7E7E7E;fillColor=#DD344C;strokeColor=#ffffff;dashed=0;verticalLabelPosition=middle;verticalAlign=middle;align=left;html=1;fontSize=12;fontStyle=1;aspect=fixed;shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.network_firewall;labelPosition=right;" value="&amp;nbsp;AWS Network Firewall&lt;br&gt;&amp;nbsp;(stateful inspection, IPS)" vertex="1">
          <mxGeometry height="78" width="78" x="375" y="600" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-6" parent="1" style="sketch=0;outlineConnect=0;fontColor=#7E7E7E;gradientColor=none;fillColor=#8C4FFF;strokeColor=none;dashed=0;verticalLabelPosition=middle;verticalAlign=middle;align=left;html=1;fontSize=12;fontStyle=1;aspect=fixed;pointerEvents=1;shape=mxgraph.aws4.nat_gateway;labelPosition=right;" value="&amp;nbsp;NAT gateway / Egress-only IGW&lt;br&gt;&amp;nbsp;(egress path)" vertex="1">
          <mxGeometry height="78" width="78" x="375" y="760" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-7" parent="1" style="ellipse;shape=cloud;whiteSpace=wrap;html=1;fillColor=light-dark(#7E7E7E,#7E7E7E);strokeColor=#ffffff;fontColor=#ffffff;fontStyle=1;fontSize=13;" value="Internet" vertex="1">
          <mxGeometry height="100" width="140" x="344" y="930" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-8" edge="1" parent="1" source="GyzbsZ9NTCDikXR92pf4-14" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#7E7E7E;strokeWidth=2;endArrow=classic;exitX=0.5;exitY=1;exitDx=0;exitDy=0;exitPerimeter=0;" target="GyzbsZ9NTCDikXR92pf4-13">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="414" y="160" as="sourcePoint" />
            <mxPoint x="414" y="240" as="targetPoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-9" edge="1" parent="1" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#7E7E7E;strokeWidth=2;endArrow=classic;" target="GyzbsZ9NTCDikXR92pf4-4">
          <mxGeometry relative="1" as="geometry">
            <mxPoint x="414" y="360" as="sourcePoint" />
          </mxGeometry>
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-10" edge="1" parent="1" source="GyzbsZ9NTCDikXR92pf4-4" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#7E7E7E;strokeWidth=2;endArrow=classic;" target="GyzbsZ9NTCDikXR92pf4-5">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-11" edge="1" parent="1" source="GyzbsZ9NTCDikXR92pf4-5" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#7E7E7E;strokeWidth=2;endArrow=classic;" target="GyzbsZ9NTCDikXR92pf4-6">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-12" edge="1" parent="1" source="GyzbsZ9NTCDikXR92pf4-6" style="edgeStyle=orthogonalEdgeStyle;rounded=1;html=1;strokeColor=#7E7E7E;strokeWidth=2;endArrow=classic;" target="GyzbsZ9NTCDikXR92pf4-7">
          <mxGeometry relative="1" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-13" parent="1" style="fillColor=none;strokeColor=#DD3522;verticalAlign=top;fontStyle=0;fontColor=#DD3522;whiteSpace=wrap;html=1;" value="Security group&lt;br&gt;(Outbound rules)" vertex="1">
          <mxGeometry height="120" width="180" x="324" y="240" as="geometry" />
        </mxCell>
        <mxCell id="GyzbsZ9NTCDikXR92pf4-14" parent="1" style="sketch=0;points=[[0,0,0],[0.25,0,0],[0.5,0,0],[0.75,0,0],[1,0,0],[0,1,0],[0.25,1,0],[0.5,1,0],[0.75,1,0],[1,1,0],[0,0.25,0],[0,0.5,0],[0,0.75,0],[1,0.25,0],[1,0.5,0],[1,0.75,0]];gradientDirection=north;outlineConnect=0;fontColor=light-dark(#7E7E7E,#7E7E7E);gradientColor=none;fillColor=#1E262E;strokeColor=#ffffff;dashed=0;verticalLabelPosition=middle;verticalAlign=middle;align=left;fontSize=12;fontStyle=0;aspect=fixed;shape=mxgraph.aws4.resourceIcon;resIcon=mxgraph.aws4.general;labelPosition=right;html=1;" value="&lt;b&gt;&amp;nbsp;Workload&lt;br&gt;&amp;nbsp;(application code)&lt;/b&gt;" vertex="1">
          <mxGeometry height="78" width="78" x="375" y="100" as="geometry" />
        </mxCell>
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>
