Learn about the purpose of security groups and the difference between security groups and network ACLs.
- [Instructor] Security groups are a firewall … at the instance level … protecting the traffic that gets to the EC2 instance. … So let's look at some details about security groups. … They allow inbound and outbound traffic. … Allow rules can be specified. … I can't control explicitly a deny rule, … yet I can deny traffic by not allowing it … but it's not a specific deny. … Security groups are stateful, … meaning that the inbound traffic is monitored. … The traffic got in; therefore, it can get back out. … The default when you define a security group … is that it doesn't care. … By default, all outbound traffic are allowed, … yet the power of a security group … is controlling the outbound destination. … For example, the traffic arrived inbound … to my load balancer. … Where does it get to go out? … Only to my web servers rather than anywhere it wants. … Let's look at some additional details on the security group … and how it operates. … Every network interface has a security group. … At creation, a default security group …
- Creating a VPC
- Creating subnets
- Default and custom route tables
- IP addressing
- Creating security groups
- Configuring an internet gateway
- Peering VPCs together
- Sharing VPC resources
- Creating flow logs for monitoring
- Controlling access with IAM roles
- Dedicated tenancy
- Using automation for compliance
Skill Level Intermediate
What you should know2m 7s
1. VPC Architecture
2. Creating VPCs
3. Creating Subnets
4. IP Addressing
5. VPC Security
6. VPC Public Connectivity
7. VPC Private Connectivity
8. VPC Compliance
Next steps1m 23s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.