How do network ACLs differ from security groups at Cloud Practition…

Question

How do network ACLs differ from security groups at Cloud Practitioner depth?

Accepted Answer

Network ACLs are subnet-level stateless filters, while security groups are stateful controls typically associated with instances — Picture two checkpoints: the security group sits next to the instance and remembers conversations (stateful). The network ACL sits at the subnet gate and checks each direction separately (stateless). Different layer, different memory.

Answer

Network ACLs encrypt EBS volumes; security groups encrypt S3 objects

Answer

Network ACLs replace IAM policies for API authorization

Answer

Security groups are always stateless; network ACLs are always stateful

How do network ACLs differ from security groups at Cloud Practitioner depth?

Short Explanation

Full Explanation