I'm just blocking originating connections from AWS on select servers. It's riskier in theory than in practice, as even the nonmalicious connections don't add mu

I'm just blocking originating connections from AWS on select servers. It's riskier in theory than in practice, as even the nonmalicious connections don't add much value. But you're right, I'm revisiting and will probably scale it back to just block web crawling, as no human activity seems to originate from that space.