IP Address Group Overview

An IP address group is a collection of IP addresses that can use the same security group rules or network ACL rules. You can use an IP address group to manage IP addresses that have the same security requirements or whose security requirements change frequently.

You can create an IP address group and add IP addresses that need to be managed in a unified manner to the group. Then, you can select this IP address group when configuring a security group rule. The rule will take effect for all IP addresses in the IP address group.

Notes and Constraints

Security group rules that are associated with an IP address group do not take effect for certain ECSs.
- General computing (S1, C1, and C2 ECSs)
- Memory-optimized (M1 ECSs)
- High-performance computing (H1 ECSs)
- Disk-intensive (D1 ECSs)
- GPU-accelerated (G1 and G2 ECSs)
- Large-memory (E1, E2, and ET2 ECSs)
If a network ACL rule uses an IP address group:
- Either the source or the destination of an inbound rule can use the IP address group.
- Either the source or the destination of an outbound rule can use the IP address group.
For example, if the source of an inbound rule network ACL is set to an IP address group, the rule destination can only be an IP address.