From the course: AWS Administration: Security Operations

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

VPC Security groups

VPC Security groups

- [Instructor] Each VPC has a number of security levels. At the subnet level we have a network access control list which determines the traffic that is allowed in or denied coming in and the traffic that is allowed or denied from coming out from the subnet. Closer to the instance we have a security group, another firewall that protects the instance by only allowing specific ports to direct traffic to the instance. A security group is a virtual firewall that protects the traffic to an EC2 instance. A security group is always associated with a particular network, a VPC. One handy tool to use to check on how your security groups have been created to see if there's any security holes is to use the Trusted Advisor. Once you create security groups you probably want to protect who can create and modify security groups. You can actually control this level of security using Identity and Access Management and define the…

Contents