Explanation: Security Groups in VPC operate at the instance level, providing a way to control the incoming and outgoing instance traffic. In contrast, network ACLs operate at the subnet level, providing a way to control the traffic that flows through the subnets of your VPC. Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security….