You are writing Contrail firewall rule policies for a recently added application on an AWS cloud environment. The application is complex and requires access to a list of s3 databases along with…

You are writing Contrail firewall rule policies for a recently added application on an AWS cloud environment. The application is complex and requires access to a list of s3 databases along with various protocol and port combinations. In this scenario, which two policy rule constructs would ensure that the number of rules are limited without affecting functionality? (Choose two.)