@Override
    public void validate(Context context) {
        if (!context.deployState().isHosted() || context.deployState().zone().system().isPublic()) return;
        if (context.deployState().getProperties().allowDisableMtls()) return;
        context.model().getContainerClusters().forEach((id, cluster) -> {
            Http http = cluster.getHttp();
            if (http != null) {
                if (http.getAccessControl().isPresent()) {
                    verifyNoExclusions(id, http.getAccessControl().get(), context);
                }
            }
        });
    }
Validates that 'access-control' does not include any exclusions unless explicitly allowed.
Logs in Yahoo clouds and fails in AWS clouds

@author mortent
config-model/src/main/java/com/yahoo/vespa/model/application/validation/AccessControlFilterExcludeValidator.java