Security Groups

Security groups are stateful virtual firewalls in cloud environments (AWS, Azure, GCP) that control inbound and outbound traffic to compute instances at the instance level. They evaluate rules based on protocol, port, and source/destination IP or security group ID.

As stateful firewalls, they automatically allow return traffic for established connections. Security groups are the primary network access control mechanism for individual cloud workloads and should follow least privilege principles.