Answer:   1. Security Groups
Can control the access at the instance level
Can add rules for “allow” only
Evaluates all rules before allowing the traffic
Can assign unlimited number of security groups
Statefull filtering.
2. Network access control list
Can control access at the subnet level
Can add rules for both “allow” and “deny”
Rules are processed in order number when allowing traffic.
Can assign upto 5 security groups.
Stateless filtering