Network and edge protection: security groups, network ACLs, AWS WAF, AWS Shield, and AWS Firewall Manager

By the end you’ll be able to

• Differentiate security groups from network ACLs by scope, statefulness, and typical use in controlling network traffic.
• Identify security groups as stateful virtual firewall controls associated with resources such as Amazon EC2 instances.
• Identify network ACLs as stateless subnet-level controls used to allow or deny traffic entering or leaving a subnet.