A. Attach an AWS Network Firewall policy for each zone to the subnet for the node cluster.
B. Attach a secondary elastic network interface to each instance for the internal communications between nodes.
C. Attach a secondary elastic network interface to each instance for the storage communications.
D. Configure a security group with rules that allow only TCP connections within the security group on the ports that are assigned for the internal network connections. Associate the security group with the appropriate elastic network interface on each instance.
E. Configure a security group with rules that allow only TCP connections with the external customer network on the ports that are assigned for the client connections. Associate the security group with the appropriate elastic network interface.
F. Configure a security group with rules that allow Non-Volatile Memory Express (NVMe) connections within the subnet range. Associate the security group with the appropriate elastic network interface on each instance.