Help Center> Elastic Cloud Server> API Reference> Permissions Policies and Supported Actions> Security Group Management
View PDF

Security Group Management

Permission

API

Action

Dependent Permission

IAM Project

Enterprise Project

Creating a Security Group (Native OpenStack API)

POST /v2.1/{project_id}/os-security-groups

ecs:securityGroups:use

vpc:securityGroups:get

vpc:securityGroups:create

vpc:securityGroups:update

√

x

Deleting a Security Group (Native OpenStack API)

DELETE /v2.1/{project_id}/os-security-groups/{security_group_id}

ecs:securityGroups:use

vpc:securityGroups:get

vpc:securityGroups:delete

vpc:securityGroups:update

√

x

Querying Details About a Security Group (Native OpenStack API)

GET /v2.1/{project_id}/os-security-groups/{security_group_id}

ecs:securityGroups:use

vpc:securityGroups:get

√

x

Querying Security Groups (Native OpenStack API)

GET /v2.1/{project_id}/os-security-groups

ecs:securityGroups:use

vpc:securityGroups:get

√

x

Creating a Security Group Rule (Native OpenStack API)

POST /v2.1/{project_id}/os-security-group-rules

ecs:securityGroups:use

vpc:securityGroups:get

vpc:securityGroups:update

vpc:securityGroupRules:get

vpc:securityGroupRules:create

√

x

Deleting a Security Group Rule (Native OpenStack API)

DELETE /v2.1/{project_id}/os-security-group-rules/{security_group_rule_id}

ecs:securityGroups:use

vpc:securityGroups:get

vpc:securityGroups:update

vpc:securityGroupRules:get

vpc:securityGroupRules:delete

√

x

Updating Information About a Security Group (Native OpenStack API)

PUT /v2.1/{project_id}/os-security-groups/{security_group_id}

ecs:securityGroups:use

vpc:securityGroups:get

vpc:securityGroups:update

√

x

Querying Security Groups to Which an ECS Belongs (Native OpenStack API)

GET /v2.1/{project_id}/servers/{server_id}/os-security-groups

ecs:securityGroups:use

vpc:securityGroups:get

√

x

Adding a Security Group (Native OpenStack API)

POST /v2.1/{project_id}/servers/{server_id}/action

ecs:securityGroups:use

ecs:servers:get

vpc:securityGroups:get

vpc:securityGroups:create

vpc:securityGroups:update

vpc:ports:get

vpc:ports:update

√

x

Removing a Security Group (Native OpenStack API)

POST /v2.1/{project_id}/servers/{server_id}/action

ecs:securityGroups:use

ecs:servers:get

vpc:securityGroups:get

vpc:securityGroups:delete

vpc:securityGroups:update

vpc:ports:get

vpc:ports:update

√

x