Security Groups vs. NACLs

Difficulty: Intermediate

Question

What is the difference between a Security Group and a Network ACL (NACL)?

Answer

Security Groups are stateful and work at the instance level. NACLs are stateless and work at the subnet level.

Concepts covered

Security Group, NACL, Stateful, Stateless, Firewall