๐ก๏ธ Day 2 of AWS โ The Security Group Saga
A beginnerโs honest story of misreading a task, making a mistake, and accidentally learning three things instead of one. ๐
๐ก๏ธ Day 2 of AWS โ The Security Group Saga
A beginnerโs honest story of misreading a task, making a mistake, and accidentally learning three things instead of one. ๐
Day 2 of my 50 Days of AWS journey on KodeKloud. ๐ Yesterday it was key pairs. Today? Security Groups โ and once again, I found a way to learn more than I was supposed to. ๐
๐ What is a Security Group?
Before diving in, letโs understand what a Security Group actually is! ๐
A Security Group in AWS acts as a virtual firewall for your EC2 instances. ๐ฅ It controls what traffic is allowed in and out of your instance.
- Inbound Rules ๐ฅ โ Traffic coming into your instance (e.g. someone accessing your website)
- Outbound Rules ๐ค โ Traffic going out of your instance (e.g. your instance calling an external API)
A few important things to know: ๐ง
- Security Groups are stateful โ if you allow inbound traffic, the response is automatically allowed out, and vice versa
- By default, all inbound traffic is blocked and all outbound traffic is allowed
- You can attach one or more Security Groups to an EC2 instance
Think of it like a bouncer at a club ๐ญ โ decides who gets in, who gets out, and who gets turned away at the door.
๐ The Task
The assignment was simple: Create a Security Group with 2 inbound rules โ one for HTTP and one for SSH. ๐ฏ
HTTP โ for web traffic on port 80. ๐ SSH โ for remote access on port 22. ๐ป
Simple enough, right? ๐ Wellโฆ
๐ What I Actually Did
I read the task. Or at least I thought I did. ๐
My brain processed it as: โTwo rules โ one inbound, one outbound.โ ๐คฆ
So thatโs exactly what I created:
- Inbound โ SSH on port 22 โ
- Outbound โ HTTP on port 80 โ (wrong!)
I submitted it feeling pretty good about myself. ๐
Task Failed. โ
Thatโs when I re-read the task.
Both rules were supposed to be inbound. ๐ญ๐
I sat there for a second thinking โ โThis is Day 2 and Iโm already failing tasks.โ ๐ค
๐ ๏ธ The Silver Lining โ Editing the Security Group
Hereโs where it got interesting. ๐ก
To fix my mistake, I had to edit the Security Group โ remove the wrong outbound rule and add the correct inbound HTTP rule.
And just like that, without planning to, I learned:
- How to edit inbound and outbound rules on an existing Security Group โ
- The difference between inbound and outbound rules in practice โ not just in theory โ
The mistake forced me into the edit workflow. I would have skipped it entirely if Iโd done it right the first time. ๐คท๐
๐๏ธ And Then I Deleted It Too
Once I had the correct Security Group โ HTTP inbound + SSH inbound โ I thought, why not practice deleting it too? ๐ง
So I did.
EC2 โ Security Groups โ Select โ Actions โ Delete
Gone. โ
Three operations in one session: Create, Edit, Delete. Not bad for a task that was supposed to be just one. ๐ช
๐ง What I Actually Learned Today
1. Inbound vs Outbound โ know the difference. ๐ฅ๐ค Inbound = traffic coming into your instance. Outbound = traffic going out. Read the task carefully before creating rules. ๐
2. Security Groups are stateful. ๐ You donโt need a separate outbound rule to allow responses to inbound traffic. AWS handles that automatically. This is different from Network ACLs which are stateless โ but thatโs a story for another day!
3. Editing rules is straightforward. ๐ ๏ธ You can add, modify, or remove rules from an existing Security Group at any time without recreating it. Changes take effect immediately.
4. HTTP = Port 80, SSH = Port 22. ๐ข These are the two most common ports youโll deal with in EC2. Burn them into memory.
๐ฏ The Takeaway
I misread the task. Made the wrong configuration. Had to go back and fix it.
But hereโs the thing โ Focus on the outcome, not the obstacle. โจ
The obstacle was the mistake. The outcome? I didnโt just learn how to create a Security Group โ I learned how to create, edit, and delete one. A single mistake turned one skill into three. ๐ช
If youโre learning AWS and things donโt go as planned โ donโt stress. The detours are often where the real learning happens. ๐
Day 2 of my 50 Days of AWS journey on KodeKloud. One mistake, three lessons, zero regrets. Follow along if youโre on a similar path! ๐๐ฅ
๋ฉํ๋ฐ์ดํฐ
- post_id
- d99bcbec1766
- slug
- ๏ธ-day-2-of-aws-the-security-group-saga-d99bcbec1766
- url
- https://medium.com/@krishbala49/%EF%B8%8F-day-2-of-aws-the-security-group-saga-d99bcbec1766
- canonical_url
- https://medium.com/@krishbala49/%EF%B8%8F-day-2-of-aws-the-security-group-saga-d99bcbec1766
- author_url
- https://medium.com/@krishbala49
- status
- ok
- fetched_at
- 2026-07-13 06:23:13