Create three different subnets, one each for Avaya SBC Management, Avaya SBC external, and Avaya SBC internal networks.
Create and configure AWS network ACLs for Avaya SBC to deny network communication of Avaya SBC external subnet with other subnets of Avaya SBC and with other subnets of Avaya Aura® instances.