A perimeter zone (also known as a DMZ) is a physical or logical subnetwork that contains and exposes applications and services to outside users (for example, untrusted users) and networks (for example, the internet). The purpose of a perimeter zone is to add an additional layer of security to your network. A perimeter zone can help you control the incoming and outgoing network traffic from your virtual private cloud (VPC).