title: Why is it that an NLB in AWS does not require a Security Group?
body: <p>In AWS, while configuring CLB and ALB type of Load balancers, it is mandatory to associate a Security Group. This association helps in limiting the type of traffic to the Load balancer. Why is a Security Group not required for an NLB? Is it not a security risk? I know the best guess here could be - &quot;AWS designed it this way&quot; but their documentation does not seem to explain the reasoning / advantage on omitting security group configuration for NLB.</p>