If I block traffic via a security group, I assume I don't have to pay for it.
But if I block traffic via iptables installed on my server then I assume it would be me that pays for any incoming traffic I blocked.
Are there things iptables can do that a security group cannot?
I am asking because I am looking into mitigating DDoS attacks on my web server. Thanks.