Exploring NSX and AWS security architecture and capabilities
In the following section, we’ll describe the firewalling and security capabilities of a VMware Cloud on AWS SDDC and AWS.
AWS security groups
An AWS security group regulates all the incoming and outgoing traffic of the resources. These resources can include Amazon EC2, elastic network interfaces, Amazon Elastic File System (EFS), and Amazon FSx filesystems. A security group is associated with resources within the VPC it was created for. Unlike Network Access Control Lists (NACLs), which are applied to VPC subnets, a security group is tied to individual resources. Additionally, security groups are stateful, which means they are bidirectional. In other words, if inbound traffic is permitted, the corresponding response packets in the opposite direction are always allowed by default.
The AWS security groups control the traffic flow from and to the connected VPC. The security groups control traffic on the AWS side...
