What is the best way to control outbound internet traffic from the public cloud VPC in absence of virtual firewall appliance?