From the course: AWS Certified SysOps Administrator - Associate (SOA-C02) Cert Prep

Unlock this course with a free trial

Join today to access over 24,600 courses taught by industry experts.

Security Group vs. Network ACL

Security Group vs. Network ACL - Amazon Web Services (AWS) Tutorial

From the course: AWS Certified SysOps Administrator - Associate (SOA-C02) Cert Prep

Start my 1-month free trial Buy for my team

Security Group vs. Network ACL

“

- [Instructor] Security groups and network ACLs are two security features in Amazon VPC. When you create a new VPC, a default security group and a network ACL will automatically be created. The same is true for the default VPC in your AWS account. Both of them act as a virtual firewall that protects your EC2 instances or DS databases and other resources from unauthorized traffic. These two have inbound and outbound rules that you can configure and can accept a single IP address or a CIDR range as a source. You can create an inbound rule to control the incoming traffic to your network and an outbound rule to manage the outgoing traffic. These two features can work together to ensure data security in transit of your VPC. However, you must also know which one of these can explicitly deny traffic, which one uses ephemeral ports on its outbound rules, and which one is stateful or not. The first difference is their scope.…

Contents