There are two ways to provide network security to instances running in a VPC, which are as follows: Security groups NACLs