โ† Back to list

๐Ÿ›ก๏ธ Day 2 of AWS โ€” The Security Group Saga

A beginnerโ€™s honest story of misreading a task, making a mistake, and accidentally learning three things instead of one. ๐Ÿ˜…

Balaji Kannigesvaran ยท 2026-06-02 16:37 ยท 0 claps ยท 2.9 min read
#aws #cloud #securitygroup #aws-ec2 #ec2-security-groups
Open on Medium โ†—
Wiki topics: GEN ยท Genomics & Sequencing EDU ยท Education & Learning โ˜๏ธ ยท DevOps & Cloud ๐Ÿ“š ยท Books & Reading

๐Ÿ›ก๏ธ Day 2 of AWS โ€” The Security Group Saga

A beginnerโ€™s honest story of misreading a task, making a mistake, and accidentally learning three things instead of one. ๐Ÿ˜…

Day 2 of my 50 Days of AWS journey on KodeKloud. ๐Ÿš€ Yesterday it was key pairs. Today? Security Groups โ€” and once again, I found a way to learn more than I was supposed to. ๐Ÿ“

๐Ÿ” What is a Security Group?

Before diving in, letโ€™s understand what a Security Group actually is! ๐Ÿ˜Š

A Security Group in AWS acts as a virtual firewall for your EC2 instances. ๐Ÿ”ฅ It controls what traffic is allowed in and out of your instance.

  • Inbound Rules ๐Ÿ“ฅ โ€” Traffic coming into your instance (e.g. someone accessing your website)
  • Outbound Rules ๐Ÿ“ค โ€” Traffic going out of your instance (e.g. your instance calling an external API)

A few important things to know: ๐Ÿง

  • Security Groups are stateful โ€” if you allow inbound traffic, the response is automatically allowed out, and vice versa
  • By default, all inbound traffic is blocked and all outbound traffic is allowed
  • You can attach one or more Security Groups to an EC2 instance

Think of it like a bouncer at a club ๐ŸŽญ โ€” decides who gets in, who gets out, and who gets turned away at the door.

๐Ÿ“‹ The Task

The assignment was simple: Create a Security Group with 2 inbound rules โ€” one for HTTP and one for SSH. ๐ŸŽฏ

HTTP โ€” for web traffic on port 80. ๐ŸŒ SSH โ€” for remote access on port 22. ๐Ÿ’ป

Simple enough, right? ๐Ÿ˜„ Wellโ€ฆ

๐ŸŒ€ What I Actually Did

I read the task. Or at least I thought I did. ๐Ÿ‘€

My brain processed it as: โ€œTwo rules โ€” one inbound, one outbound.โ€ ๐Ÿคฆ

So thatโ€™s exactly what I created:

  • Inbound โ€” SSH on port 22 โœ…
  • Outbound โ€” HTTP on port 80 โŒ (wrong!)

I submitted it feeling pretty good about myself. ๐Ÿ˜Ž

Task Failed. โŒ

Thatโ€™s when I re-read the task.

Both rules were supposed to be inbound. ๐Ÿ˜ญ๐Ÿ˜‚

I sat there for a second thinking โ€” โ€œThis is Day 2 and Iโ€™m already failing tasks.โ€ ๐Ÿ˜ค

๐Ÿ› ๏ธ The Silver Lining โ€” Editing the Security Group

Hereโ€™s where it got interesting. ๐Ÿ’ก

To fix my mistake, I had to edit the Security Group โ€” remove the wrong outbound rule and add the correct inbound HTTP rule.

And just like that, without planning to, I learned:

  • How to edit inbound and outbound rules on an existing Security Group โœ…
  • The difference between inbound and outbound rules in practice โ€” not just in theory โœ…

The mistake forced me into the edit workflow. I would have skipped it entirely if Iโ€™d done it right the first time. ๐Ÿคท๐Ÿ˜„

๐Ÿ—‘๏ธ And Then I Deleted It Too

Once I had the correct Security Group โ€” HTTP inbound + SSH inbound โ€” I thought, why not practice deleting it too? ๐Ÿง

So I did.

EC2 โ†’ Security Groups โ†’ Select โ†’ Actions โ†’ Delete

Gone. โœ…

Three operations in one session: Create, Edit, Delete. Not bad for a task that was supposed to be just one. ๐Ÿ’ช

๐Ÿง  What I Actually Learned Today

1. Inbound vs Outbound โ€” know the difference. ๐Ÿ“ฅ๐Ÿ“ค Inbound = traffic coming into your instance. Outbound = traffic going out. Read the task carefully before creating rules. ๐Ÿ˜…

2. Security Groups are stateful. ๐Ÿ”„ You donโ€™t need a separate outbound rule to allow responses to inbound traffic. AWS handles that automatically. This is different from Network ACLs which are stateless โ€” but thatโ€™s a story for another day!

3. Editing rules is straightforward. ๐Ÿ› ๏ธ You can add, modify, or remove rules from an existing Security Group at any time without recreating it. Changes take effect immediately.

4. HTTP = Port 80, SSH = Port 22. ๐Ÿ”ข These are the two most common ports youโ€™ll deal with in EC2. Burn them into memory.

๐ŸŽฏ The Takeaway

I misread the task. Made the wrong configuration. Had to go back and fix it.

But hereโ€™s the thing โ€” Focus on the outcome, not the obstacle. โœจ

The obstacle was the mistake. The outcome? I didnโ€™t just learn how to create a Security Group โ€” I learned how to create, edit, and delete one. A single mistake turned one skill into three. ๐Ÿ’ช

If youโ€™re learning AWS and things donโ€™t go as planned โ€” donโ€™t stress. The detours are often where the real learning happens. ๐ŸŒ

Day 2 of my 50 Days of AWS journey on KodeKloud. One mistake, three lessons, zero regrets. Follow along if youโ€™re on a similar path! ๐Ÿ™Œ๐Ÿ”ฅ


๋ฉ”ํƒ€๋ฐ์ดํ„ฐ
post_id
d99bcbec1766
slug
๏ธ-day-2-of-aws-the-security-group-saga-d99bcbec1766
url
https://medium.com/@krishbala49/%EF%B8%8F-day-2-of-aws-the-security-group-saga-d99bcbec1766
canonical_url
https://medium.com/@krishbala49/%EF%B8%8F-day-2-of-aws-the-security-group-saga-d99bcbec1766
author_url
https://medium.com/@krishbala49
status
ok
fetched_at
2026-07-13 06:23:13