Courses / AWS
26. Network ACL (NACL)
A stateless subnet-level access control list that allows or denies traffic to/from subnets.
AWS (cloud infrastructure)
Network ACL (NACL)
A stateless, subnet-level list of allow/deny rules that controls inbound and outbound IP traffic for subnets in a VPC.
"I want a simple fence at the subnet boundary to block or allow traffic without touching individual instances."
A Network ACL is an ordered set of stateless rules attached to a subnet that explicitly allows or denies IP traffic based on protocol, ports, and CIDR; every packet is checked against the rules in numeric order and the first match wins.
"I want a simple fence at the subnet boundary to block or allow traffic without touching individual instances."
A Network ACL is an ordered set of stateless rules attached to a subnet that explicitly allows or denies IP traffic based on protocol, ports, and CIDR; every packet is checked against the rules in numeric order and the first match wins.