I'm setting up a new subnet and following AWS's "Recommended Network ACL Rules for Your VPC": http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Appendix_NACLs.html#VPC_Appendix_NACLs_Scenario_2
Inbound Rule number 140 Allows ports 1024-65535 for Ephemeral ports.
Source IP: 0.0.0.0/0
Comments: Allows inbound return traffic from hosts on the Internet that are responding to requests originating in the subnet.
I understand what Ephemeral ports are, but wouldn't this rule also Allow connections to say, an application started by a user/admin within this port range? For example, is the previous rule, #130, in this example needed since the port it's opening (3389) will be covered by the broad Ephemeral port rule?