Network ACLs
Note
Network ACLs operate at the Subnet Level

Key Differences: Security Groups vs NACLs
| Feature | Security Group | Network ACL |
|---|---|---|
| Level | Instance level | Subnet level |
| State | Stateful | Stateless |
| Rules | Allow rules only | Allow and Deny rules |
| Evaluation | All rules evaluated | Rules evaluated in order |