Network ACL, Security Group

Question 1

What are the key features of a network ACL?

Answer 1

• Explicit allow or deny rules
• Stateless
• Applied to subnets
• A VPC has a default one that allows all inbound and outbound traffic

Question 2

What are the key features of a Security Group?

Answer 2

• Explicit allow only
• Stateful
• Applied to ENI
• VPC has a default one that allows no inbound and allows all outbound