Question: what is the difference between nacl and security groups?
Answer: Security groups are associated with an instance of a service. It can be associated with one or more security groups which has been created by the user. NACL can be understood as the firewall or protection for the subnet. Security group can be understood as a firewall to protect EC2 instances.