An infrastructure ACL (access control list) is a network rule set that allows or denies traffic based on source, destination, port, protocol, or interface. It is often used to restrict who can reach high-value services such as management consoles, authentication servers, APIs, and admin subnets.
In cyber security, infrastructure ACLs matter because they shrink the attack surface. If an exposed service has a flaw, a tight ACL can prevent unrelated systems from reaching it and may block initial exploitation. Attackers often look for overly broad rules, open management ports, or paths that bypass network filtering. Defenders use ACLs to limit access to jump hosts, monitoring systems, and approved administrative networks, but they should be treated as a layer of defense rather than a fix for vulnerable software. When a critical service is involved, least-privilege network access can buy time, reduce exposure, and make intrusion attempts easier to detect.