You can control the security to your VPC in two ways:
Security Groups : It acts as a virtual firewall for associated EC2 instances that control both inbound and outbound traffic at the instance level.
Network access control lists (NACL) : It acts as a firewall for associated subnets that control both inbound and outbound traffic at the subnet level.
