ChatGPT is so wrong on this AWS network security question! Security Groups are stateful for ICMP too and use a 3-tuple to track connections: Source IP, Destination IP and Identifier. The Identifier is the Sequence Number during an Echo Request.