Term Kind Topic What it is
Egress Filtering practice Network Security Restricting what a workload may connect out to, which is the control that turns a compromise into a contained one.
Security Group Sprawl concept Network Security The accumulation of firewall and security group rules that nobody can safely remove, producing a permissive posture nobody chose.
TLS Termination Boundary Encryption Termination Point, Decryption Boundary concept Network Security The exact point where ciphertext becomes plaintext, which is the real answer to "is data encrypted in transit" - everything past it travels in the clear on a wire somebody owns.
Web Application Firewall WAF tool Network Security A filter in front of an application that inspects HTTP requests and blocks those matching known attack patterns — useful as a layer, dangerous as a substitute.