A solution deployed in a virtual private cloud $($VPC$)$ needs a subnet with limited access to specific internet addresses. How can an architect configure the network to limit traffic from and to the EC$2$ instances in the subnet using a network access control list $($ACL$)?$ Add rules to the default network ACL to allow traffic from and to allowed internet addresses. Add rules to the subnet custom network ACL to allow traffic from and to allowed internet addresses. Add rules to the default network ACL to allow traffic from and to allowed internet addresses. Deny all other traffic. Add rules to the subnet custom network ACL to allow traffic from and to allowed internet addresses. Deny all other traffic.