Question

What AWS resource acts as a firewall and can be configured to only allow traffic from specific resources/ports to provide hardened network security?

Group of answer choices

Identity and Access Management (IAM)

Security groups

Cloud firewall

AWS Web Application Firewall (WAF)

Answer 1

Ans.

Security Groups :
It is a traditional firewall techniqueue that can limit the attack surface or area for potential attackers or hackers and deny traffic to and from the source of attack destination. Security groups provide strong network security by allowing traffic from specific port. Security groups enable firewall rules in both directions for every established TCP or UDP communications channel.

Whenever an EC2 instance is created, security resource act as a virtual firewall to control incoming and outgoing traffic. Security groups are defined by two types of rules - Inbound rules and Outbound rules.

Inbound rules - control the incoming traffic to your instance

Outbound rules control the outgoing traffic from your instance.