Can a Security Group rule reference another Security Group instead of an IP address range?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Yes, this allows for dynamic and secure communication between tiers

Referencing security groups (e.g., allowing traffic from the 'WebTier' SG to the 'DBTier' SG) is a best practice for security....

๐Ÿ“‹Part of AWS Certified Cloud Practitioner (CLF-C02) ยท AWS Certification Practice
Real Exam ScenarioSecurity Groups

Can a Security Group rule reference another Security Group instead of an IP address range?

โœ“ Correct Answer & ExplanationSecurity Groups

Correct Answer

Yes, this allows for dynamic and secure communication between tiers

Why This Answer Is Correct

Referencing security groups (e.g., allowing traffic from the 'WebTier' SG to the 'DBTier' SG) is a best practice for security.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Security Groups โ€” a core concept tested in AWS Certified Cloud Practitioner (CLF-C02). Understanding Security Groups is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.