Security Groups Are Stateful
A security group allows inbound TCP 443 from anywhere and has no outbound rules that match the client. Will responses to HTTPS requests reach the clients?
Choose one answer
Only for IPv6 clients.
Only if the network ACL also allows port 443 outbound.
Yes, security groups are stateful, so return traffic for allowed connections is permitted automatically.
No, an outbound rule for the client's ephemeral port is required.