Ravi Sir's Cards › AWS
ENI stateful or subnet stateless?
This comparison card contrasts ENI stateful or subnet stateless. Security Group is described as stateful allow-only on ENIs. It also notes return auto. NACL is described as stateless numbered allow/deny on subnets. The card pairs Security Group with always with tiers, and NACL with extra subnet control.
Read card text
What this card says
ENI stateful or subnet stateless?
Security Group
Stateful allow-only on ENIs; return auto.
NACL
Stateless numbered allow/deny on subnets.
Key points
Instance-level least privilege.
Subnet guardrails / explicit denies.
Example
SG inbound/outbound
Use when
Always with tiers.
Extra subnet control.