In AWS, security groups are per-host/resource firewalls.