What are the key differences between AWS WAF, AWS Network Firewall, and Security Groups when designing a layered security architecture?

Question

AWS Cloud Practitioner — Hard

What are the key differences between AWS WAF, AWS Network Firewall, and Security Groups when designing a layered security architecture?

Accepted Answer

AWS Security Groups, AWS WAF, and AWS Network Firewall serve different purposes in a layered security architecture. Security Groups control EC2 traffic at the instance level, WAF filters HTTP/HTTPS requests at Layer 7, and Network Firewall provides VPC-level protection. This distinction ensures a comprehensive defense strategy.