Difference between NACL and security group

Question

Accepted Answer

NACL is a stateless firewall at the subnet level, while security groups are stateful firewalls at the instance level.

NACL operates at the subnet level, controlling inbound and outbound traffic based on rules.
Security groups operate at the instance level, controlling inbound and outbound traffic based on rules.
NACL is stateless, meaning it does not keep track of the state of connections.
Security groups are stateful, meaning they keep track of the state of connections.
NACL rules are evaluated in order, with the first rule that matches being applied.
Security group rules are evaluated independently and all rules that apply are enforced.

Popular interview questions of Devops Engineer