Question: what is the difference between nacl and security groups in aws?
Answer: A security group has to be explicitly assigned to an instance; it doesn't associate itself to a subnet. Security groups are associated with an instance of a service. ... NACL can be understood as the firewall or protection for the subnet. Security group can be understood as a firewall to protect EC2 instances.