Steve is in the process of designing his cloud infrastructure and requires a firewall-like feature for the virtual systems he will be running. Which of the following cloud capabilities provides a virtual firewall-like functionality?

Security groups function as a virtual firewall for instances, allowing for the application of rules to traffic between instances. Dynamic resource allocation is a concept that facilitates the allocation of resources as required, including the ability to scale infrastructure and systems up or down as necessary. Virtual Private Cloud (VPC) endpoints provide a means of accessing services within a cloud provider without an Internet gateway. Lastly, instance awareness is a concept that recognizes the differences between instances, rather than treating each instance in a scaling group as identical. This can be significant during incident response procedures and security monitoring for scaled groups, where resources may all appear identical without instance awareness.