Skip to content

Commit

Permalink
Update Interview_q&a
Browse files Browse the repository at this point in the history
  • Loading branch information
praveenreddy33333 authored Jul 6, 2023
1 parent e855ce3 commit ff57734
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion day-8/Interview_q&a
Original file line number Diff line number Diff line change
Expand Up @@ -42,7 +42,7 @@ A: To securely access AWS services within the VPC, we can use VPC endpoints. VPC
We can create VPC endpoints for specific AWS services, such as S3 and DynamoDB, and associate them with the VPC.
This enables secure and efficient communication between the instances in the VPC and the AWS services.

Q: What is the difference between NACL and Subnet ? Explain with a use case ?
Q: What is the difference between NACL and Security groups ? Explain with a use case ?

A: For example, I want to design a security architecture, I would use a combination of NACLs and security groups. At the subnet level, I would configure NACLs to enforce inbound and outbound traffic restrictions based on source and destination IP addresses, ports, and protocols. NACLs are stateless and can provide an additional layer of defense by filtering traffic at the subnet boundary.
At the instance level, I would leverage security groups to control inbound and outbound traffic. Security groups are stateful and operate at the instance level. By carefully defining security group rules, I can allow or deny specific traffic to and from the instances based on the application's security requirements.
Expand Down

0 comments on commit ff57734

Please sign in to comment.