Security Group vs NACL
In this lab, you will launch two EC2 instances in separate subnets and configure a Security Group to allow ping between them. You will then modify the subnet’s Network ACL to block ICMP, demonstrating how Security Groups and NACLs control traffic at different levels.
Level: Beginner · Time: about 60 minutes · Region: us-east-1 · Free lab, no credit card
AWS services you'll use
- EC2
- VPC
What you'll do in this lab
- Name two subnets of the default VPC
- Create the first security group
- Create the second security group
- Launch the first instance
- Launch the second instance
- Connect to the first instance
- Test communication between the two instances
- Update the security group
- Test communication between the two instances
- Create a Custom NACL
- Add rules to the custom NACL
- Attach the custom NACL to the subnet
- Test communication between the two instances
Each task is checked against your live AWS account. Step-by-step instructions, hints and verification unlock when you start the lab.
How the lab works
- Get a real, temporary AWS account locked to one region. No AWS account of your own needed.
- Build in the real AWS console with a guide beside it, and hints when you are stuck.
- Verify every task: we check the resources in your live account.
- Automatic cleanup: everything is deleted when you stop, and nothing is billed to you.
Questions about this lab
Do I need my own AWS account?
No. When you start the lab, Cloud Arena gives you a real, temporary AWS account with its own login, locked to one region. You work in the real AWS Management Console, not a simulator.
Will AWS charge me anything?
No. Cloud Arena pays for the AWS resources, and everything you create is deleted automatically when you stop the lab or the session ends. Nothing is billed to you by AWS.
How long does the Security Group vs NACL lab take?
Plan for about 60 minutes. The session timer is shown on screen, and every task is checked against your live AWS account when you click Verify.
Is this lab really free?
Yes. It is one of the 5 free labs in the Free Starter Path: no credit card, one run per lab, in a real AWS sandbox.
Does this lab help with the Cloud Practitioner (CLF-C02) exam?
Yes. It is part of the AWS Certified Cloud Practitioner path, which covers the hands-on skills behind the exam. Doing the task in a real account is what makes the questions easier to reason about.