Network ACL controls the ingoing and outgoing traffic of an entire subnet by applying stateless security rules. It works together with security groups to add an additional layer of network security.
- Subnet-level access control
- Rule priority evaluation for precise traffic management
- Deny-by-default posture for unknown traffic
- Complements instance-level security groups