AWS CLOUD

VPC:

1. In order for you to ping between instances, you need to allow ICMP traffic in the security group. A security group is a virtual firewall and it is a stateful firewall.
2. When you launch an instance in VPC, you can assign upto a maximum of 5 security groups
3. Security groups are at the instance level and not at the subnet level.
4. If you don’t specify a security group at the instance launch, it is automatically assigned a default security group for VPC.
5. You can specify “allow rules” in security groups but not “deny” rules.
6. You can specify separate rules for inbound and outbound traffic.