Santosh Ravindran
When I look at the question, I am wondering if you meant that security groups need to be associated with the NAT Gateway or EC2 instances. There is no mention of EC2 instance in the question – left me confused with what should be the answer since you cannot associate a security group with a NAT Gateway. Can you clarify or perhaps update/correct the question to mention EC2 instance?