Question

When would you choose to use AWS NACL over Security Groups, and vice versa?

Answer 1

AWS NACL:

• Use NACLs for network-level access control when you need to control traffic at the subnet level or when specific rules need to be enforced across multiple instances in a subnet.
• Example use case: Blocking specific IP ranges from accessing instances within a subnet.

Security Groups:

• Use Security Groups when you need instance-level access control and when you want to apply rules specific to individual instances or groups of instances.
• Example use case: Allowing HTTP traffic (port 80) to a web server instance.