SCH: An affordable sandbox for Coding Agents in your AWS account

How do you handle network egress filtering when an agent legitimately needs to install dependencies or pull docs versus preventing arbitrary outbound traffic during autonomous execution?