Ravi Sir's Cards › AWS
Security group vs NACL
Security group vs NACL: SG works on the instance, is stateful and has allow rules only; NACL works on the subnet, is stateless and has allow and deny rules checked by number.

Read card text
What this card says
Security group vs NACL: SG works on the instance, is stateful and has allow rules only
NACL works on the subnet, is stateless and has allow and deny rules checked by number.