title: How to restrict client access to elastic beanstalk app?
body: <p>What is the difference between a aws security group and aws acl? I have a Lumen microservice I set up using elastic beanstalk with autoscaling and load balancing (using the "getting started" guide). The service should only be accessible from certain ip addresses. I have not understood the solutions suggested so far. Some of them suggested using ACL in a vpc while others suggested using a security group.</p>
  
  <p>Note:-</p>
  
  <p>1) I'm still learning about elastic beanstalk. But I have noticed that when setting up with elastic beanstalk, the ec2 instance is automatically put in a vpc. Don't know if this helps.</p>
  
  <p>2) Is there something similar to aws s3 ip address restriction like in this <a href="https://www.google.co.in/url?sa=t&amp;rct=j&amp;q=&amp;esrc=s&amp;source=web&amp;cd=1&amp;cad=rja&amp;uact=8&amp;ved=0ahUKEwjau8uG1fHSAhUKObwKHSFvAWwQygQIIDAA&amp;url=http%3A%2F%2Fdocs.aws.amazon.com%2FAmazonS3%2Flatest%2Fdev%2Fexample-bucket-policies.html%23example-bucket-policies-use-case-3&amp;usg=AFQjCNHnwi9tEtzDoPSQ6LjruQjDg1d5Tw" rel="nofollow noreferrer">https://www.google.co.in/url?sa=t&amp;rct=j&amp;q=&amp;esrc=s&amp;source=web&amp;cd=1&amp;cad=rja&amp;uact=8&amp;ved=0ahUKEwjau8uG1fHSAhUKObwKHSFvAWwQygQIIDAA&amp;url=http%3A%2F%2Fdocs.aws.amazon.com%2FAmazonS3%2Flatest%2Fdev%2Fexample-bucket-policies.html%23example-bucket-policies-use-case-3&amp;usg=AFQjCNHnwi9tEtzDoPSQ6LjruQjDg1d5Tw</a></p>