Limit (filter) traffic by MAC address

Hello.

As far as I know, there is no ability to filter MAC addresses in the AWS configuration.
Basically, I believe that communication to EC2 is controlled at the IP level using security groups.
https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/infrastructure-security.html

Almost all traffic to and from EC2 instances is at the IP (layer 3) level. The exception is for traffic between instances within your VPC that are on the same subnet.

Therefore, there's no option to filter traffic at the MAC (layer 2) level in AWS Network Firewall, Security Groups or NACLs - they are all used to filter traffic at layer 3 and above.

You can use operating system-based features to filter at layer 2 but traffic from outside the subnet where instance is hosted will all appear to come from the MAC address of the router on the subnet (which is emulated in any case in your VPC - but it has a static MAC address).

Why do you want to filter by MAC address? What are you trying to achieve?

Not relevant anymore. Topic can be closed and deleted. Thanks.