When you run this template, AWS will go ahead and create an isolated, secure network just for you. While it contains a number of resources and concepts which will be familiar to network administrators, it's essentially an empty shell, which you can now go ahead and populate.
For example, each VPC contains a virtual router. You can't see it and you can't log into it to perform any special configuration, but you can customize its behavior by modifying the route tables in this template.
The NACLs we've deployed are not stateful and should not be considered a substitution for security groups. NACLs are complementary to security groups, which are stateful and frankly much easier to change and manage than NACLs. While the NACLs ...
