AWS Security Groups vs NACLs: How Traffic Is Controlled Inside a VPC

When you build an application on AWS, simply placing it inside a VPC is not enough. You also need to control who can access the application, which ports are allowed, and what traffic should be blocked