From the course: VPC Networking: Designing a Software Defined Data Center on AWS

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Network ACLs

Network ACLs - Amazon Web Services (AWS) Tutorial

From the course: VPC Networking: Designing a Software Defined Data Center on AWS

Start my 1-month free trial

Network ACLs

“

- [Instructor] When we define network access control lists for our network, we have to remember that this is an optional security control for our subnets. We don't have to use it. However, you may want to use it. You may want to control security at the subnet level and at the instance level. It acts as a subnet firewall and controls the traffic, that's the network traffic, coming in and out of each subnet that the NACL is assigned to. There is a default NACL, but it really doesn't do anything. It was assigned to the VPC when the VPC was first created. When you create a custom network access control list, it overrules the default NACL and you have to define both inbound and outbound traffic flow. Any protocol with a standard protocol number, TCP/UDP, can be used for both network access control lists and security groups. A subnet can be associated with only one NACL at a time, only one set of rules. The NACL rules are defined as inbound rules, and these are separated from the outbound…

Contents