Cloud security services
As discussed in earlier chapters, one of the benefits of building in a cloud environment is the access the cloud native developers receive to dozens of services that easily integrate into the environment. This is especially important when it comes to security, as there are many features baked in to the platform that a user can and should leverage. The current list of services and features are outlined next.
Network firewalls
Security groups (SGs) and NACLs act as firewalls for virtual machines in your cloud network plane. SGs act at the machine network interface (NI) and are generally more flexible and useful in day-to-day deployments. SGs can be modified on the fly and rules cascade down to all NIs within the group. SGs by default restrict all incoming traffic (except from other machines in the same SG) and allow all outbound traffic. NACLs are similar, but are applied across a whole subnet and by default allow all traffic.
A detailed comparison between SGs and NACLs...
