What is the difference between AWS EC2 Security Groups and NACL?

What is the difference between AWS EC2 Security Groups and NACL?

AWS EC2 Security Groups are stateful, meaning they remember the traffic that is allowed. NACLs (Network Access Control Lists) are stateless, so they don't remember traffic and must allow both inbound and outbound rules.

Can you give me an example of when to use each?

Sure! Use Security Groups for instances that need to maintain a connection, like a web server. Use NACLs for broader network-level control, like restricting access to an entire subnet.

Are there any limitations to using Security Groups?

Yes, Security Groups can only be associated with EC2 instances and have a limit on the number of rules. NACLs can be applied to subnets and can have more rules.

How do I configure them in the AWS console?

In the AWS console, go to the EC2 dashboard, select 'Security Groups' or 'Network ACLs' from the sidebar, and follow the prompts to create or modify them.