AWS Developer AI Professional Tips

AWS Developer AI Professional Tips

Remember these common patterns:

Security Groups are instance-level, stateful, and allow-only.

Network ACLs are subnet-level, stateless, and support both allow and deny rules.

Use Security Group references instead of IP addresses whenever possible.

RDS should never be opened to 0.0.0.0/0; allow access only from the application Security Group.

AWS evaluates both the NACL and the Security Group—traffic must be permitted by both.

Security Groups are commonly used to secure Lambda ENIs, ECS tasks, EKS worker nodes, and Interface VPC Endpoints used by services like Amazon Bedrock