A security group controls the traffic that is allowed to reach and leave the resources that it is associated with.
- It is a virtual firewall that works at ENI level.
- Upto 5 security groups per EC2 instance interface can be applied.
- Can only have permit rules, cannot deny rules.
- Stateful, return Traffic, or allowed inbound traffic is allowed even if there are no rules to allow it.