Which networking object inside a VPC is STATELESS (return traffic does…

Question

Which networking object inside a VPC is STATELESS (return traffic doesn't auto-allow) and applies at the subnet level?

Accepted Answer

A. Network ACL (NACL)

NACLs are stateless, subnet-level, allow + deny rules.
Security groups are stateful, instance/ENI-level, allow-only.
IAM and Route 53 aren't network ACLs.

Answer

Route 53 alias record

Answer

IAM policy

Answer

Security group

Which networking object inside a VPC is STATELESS (return traffic doesn't auto-allow) and applies at the subnet level?

Keep practising Sysopssecuritynetwork