Explanation: Network ACLs are stateless; responses to allowed inbound traffic are subject to the rules for out-bound traffic (and vice versa). Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html