Which AWS service or feature enables users to block the incoming or outgoing traffic associated with specific IP addresses flowing through a VPC?

A. Network ACLs
B. Security groups
C. AWS Identity and Access Management (IAM)
D. AWS WAF