How it works...

Security groups control the incoming and outgoing requests to and from resources hosted in the AWS. Inbound rules allow incoming network traffic from source CIDR ranges with the protocol and ports mentioned in a rule. If you want to allow requests only from resources hosted inside your VPC, put an SG associated with those resources in the source. Outbound rules allow outbound requests initiated from resources hosted in the AWS.