Question

What are AWS NACLs and Security Groups, and how do they differ?

Answer 1

AWS NACL:

• AWS NACLs are stateless, meaning if you allow an inbound traffic flow, the return traffic must be explicitly allowed.
• They operate at the subnet level and filter traffic before it reaches instances.

Security Groups:

• Security Groups are stateful, meaning if you allow inbound traffic, return traffic is automatically allowed.
• They are applied at the instance level and act as a virtual firewall.