Mark As Completed Discussion

Network Access Control Lists (NACL)

Network Access Control Lists (NACL) are an important component of AWS networking for controlling traffic at the subnet level.

They act as a firewall for inbound and outbound traffic at the subnet level and provide an additional layer of security to your AWS resources.

NACLs are stateless, which means that they do not keep track of the state of the traffic. Each inbound and outbound rule is applied independently.

Inbound rules allow or deny traffic based on the source IP address, port number, and protocol. Outbound rules allow or deny traffic based on the destination IP address, port number, and protocol.

Let's take a look at an example:

TEXT/X-JAVA
1Inbound Rules:
2
3Rule 1: Allow HTTP traffic from any source IP address
4Rule 2: Allow SSH traffic from a specific source IP address
5
6Outbound Rules:
7
8Rule 1: Allow all outbound traffic to any destination IP address
JAVA
OUTPUT
:001 > Cmd/Ctrl-Enter to run, Cmd/Ctrl-/ to comment