Security groups are the fundamental network security layer in AWS, containing allow rules that control inbound and outbound traffic to resources like EC2 instances.
- Fundamental of network security in AWS
- Only contain allow rules
- Can reference by IP or by another Sg
EC2 - Sg groups
- Sg groups act as firewall on EC2 instances
- They regulate - Access to ports, Authorized IPs, Inbound and outbound network control
- Can be attached to multiple instances
- Locked down to region/VPC combination
- Since it lives outside the EC2 instance, the instance won't see the blocked traffic, and user will see a timeout issue. If user sees connection refused then it's an application issue
- All inbound is blocked by default
- Outbound is authorized by default