Please can someone point to resource group or attribute that can be used to export contracts in ACI for inter-vrf communication

We are planning to deploy NGFWv in AWS for Secure access to Internet for Central Patch Mgmt Servers. Connection will only be initiated from AWS Servers to Internet. I am not able to find any design/deployment Guides for such scenario. My questions ar...