A summary of AWS controls around security groups and the thinking behind redundant controls for state and activity.