AWS Security NACLS

Question 1

What are Network Access Control Lists associated to?

Answer 1

Networks (or subnets as they call them).

Question 1

What is a network access control list?

Answer 1

A network access control list (ACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets.

Question 2

Why are Network Access Control Lists implemented?

Answer 2

To secure the boundaries of the Virtual Private Clouds VPC’s.

Question 3

What are some features of a NACL when applied to a subnet?

Answer 3

• A NACL is an ordered list of rules.
• Each rule can either allow or deny traffic
• NACL works by processing the rules from the lowest number to the highest.
• AWS recommends that the rules be listed in increments. Ex. 5, 10, 15.

Question 4

True or false: If a NACL rule allows traffic generated from within AWS to an external location, then the inbound rule must allow the response to such traffic to come back.

Answer 4

True.