AWS NACL and Security Groups | Ephemeral Ports | Visual Explanations

What is NACL or Network access control list?
It is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets.

So we need to understand clearly that NACL is the optional layer, which works for controlling the traffic with the Subnet.
And security group works at the instance level not the subnet level.

And there are a few rules and basic concepts that we need to understand before we can use NACL properly:

1. The default VPC automatically comes with a modifiable default network ACL. and By default, it allows all inbound and outbound IPv4 traffic.

2. You can create a custom network ACL and associate it with a subnet. With the default one that you have, if you don't want to use it or if you want to use a specific target measure, then you can create your own NACL and attach your subnets to it.

VPC Sessions :
▶ PART 1: What is a VIRTUAL PRIVATE CLOUD? Amazon VPC | Visual Explanations :

▶ PART 2: WHAT IS A CIDR IN AWS? | VPC PART 2 | Visual Explanations

▶ PART 3: WHAT IS A VPC SUBNET AND HOW TO ASSIGN SUBNETS IN VPC? VPC PART 3 | Visual Explanations

▶ PART4: AWS SAVINGS PLAN | COMPUTE AND EC2 INSTANCE SAVINGS PLANS | Visual Explanations

▶ PART5: HOW TO CREATE VPC and SUBNET | HANDS-ON DEMO

▶ PART6: WHAT IS INTERNET GATEWAY? WHAT ARE ROUTE TABLES? WHAT IS PUBLIC SUBNET? | Visual Explanations

▶ PART7: HOW TO PROVIDE INTERNET ACCESS TO INSTANCES AT VPC PRIVATE SUBNET? | NAT GATEWAY | NAT INSTANCE

▶ PART8: HOW TO CREATE NAT GATEWAY? | HAND ON DEMO

▶ PART9: HOW TO CREATE NAT INSTANCE? | HAND ON DEMO

▶ PART10: VPC DHCP Options Set | AWS Private Hosted Zones | Visual Explanations

▶ PART11: AWS NACL and Security Groups | Ephemeral Ports | Visual Explanations

⭐ Kite is a free AI-powered coding assistant that will help you code faster and smarter. The Kite plugin integrates with all the top editors and IDEs to give you smart completions and documentation while you’re typing. I've been using Kite for 6 months and I love it!

🍀 If you wish to support me please choose the links below:

AWS Solutions Architect Associate Certification 2020 Playlist:

Please follow we in the links below to stay updated: 🙌

Disclaimer: The content provided in the channel are not affiliated in any way to the organization. We provide information here on the channel based on the knowledge we have on the topic. We advise our viewers to please do their own research and read more about them from the source provided by the organization to get a better outlook on the topic that has been covered.
These videos are just to provide you a platform to learn, and there can be mistakes and we are always trying to improve based on your feedback. we recommend viewers to have an open mind. Please support the channel to get more content like these in the future.

#RoadToAWS #AWSSolutionsArchitectAssociate2020 #Pythoholic

[alextemaabanke]

Never Have commented on an IT-related video before. Your teaching style is amazing! Everything is very well Thank you very much!!

[aabhaasgupta]

Simply awesome. Need more teachers like you! Thanks.

[vimalwebs]

Very good explanation with practical example . Awesome work!!

[bhavanabhavs]

I am happy to share that i cleared my SAA C02 exam jus a day ago.
I had completed Cloudguru for overview of topics and your channel helped me alot on understanding key concepts on most of the topics.
The way you explain with examples are best with lot of content. Every topic becomes an ease after your explanation.

I surely follow your videos in future for gaining knowledge. I am really very thankful for you. l do suggest your channel for my friends too.

[rjampan]

Really Awesome explanation, i ever found this kind of crystal clear explanation.... Really a Thanks a lot

[ArunkumarVB]

Excellent explanation. Way way better than ACloudGuru or any top-rated Udemy course.

[tanmayrane]

Very nice and detailed explanation, Thank you !!!

[summysanny]

Its sad that this video has only 2.9 k views ... i can see the hardwork he has put in.. and content quality is superb ... you explained it very well. BIG LIKE.

[mugilanit]

Ephemeral ports concept explanation is excellent

[pedrokarandeniya]

You have done a very good job with this video. Its very detailed

[antonwinter]

at the end of the video ( approx 29 minute mark ), with the outbound rules, are rules 100 and 110 needed? or will rule 120 work for ssh and http requests

[mulshiwaters]

Network ACLs are attached to VPC and associated at Subnet level. But somewhere I read these ACLs are configured at Implied router?

[akshaysharma-jixw]

nice video but one doubt when we used ephemeral ports for custom TCP at 28:47 but why we did not use ephemeral ports for other protocols in outbound rules????

[namanmandli]

How many more sessions/services are left to complete this series? You are working very hard for our understanding. Thanks a lot Sir.

[sadiakhan]

Thank you for your videos. It helped me to clear out many confusions.
Just wanted to make sure that Security groups are stateful and NACLs are stateless? if yes, then at 2:57 NACL slide, it says stateful, is it a typo?

[RaviKumar-dong]

What's the logic of allowing port 80 in outbound rules, if outbound rules will allow connection based on Ephemeral ports.

[treepiesinc]

very nice again. I have recommended your videos to other certificate aspirants. Thanks. Just curious which software do you use to create videos ? 😀

[hemalathavijay]

at 23:04, on deleting the port 80 in outbound rules, how does that works Sir? As per the sample table, on sending the request we had(source ip, source port:ephemeral port, dest ip, dest port:80) so on sending the request will it not check the outbound rule for dest port:80.

Please clarify sir

[Fahodinho]

1:30 timelines are not in the description for my convenient

[surfbug]

NACL ---- need to check both in and out?

SEC no need to check on the way out?


the rules and how they are executed are next!