Which of the following acts as an instance-level firewall to control inbound and outbound access?

Explanations:

Network access control lists (NACLs) work at the subnet level, controlling traffic to and from an entire subnet.

Security groups act as instance-level firewalls, controlling inbound and outbound access for individual instances.

AWS Trusted Advisor is a management tool that provides best-practice recommendations but does not control traffic.

Virtual private gateways enable private connectivity to AWS but do not act as firewalls for instance-level traffic.