Deleting One or More Security Group Rules

Scenarios

If you no longer need one or more security group rules to control the traffic to and from the instances in a security group, you can delete them.

Notes and Constraints

Note that deleting a security group rule may interrupt your services or cause network security risks.

Security group rules are like a whitelist. If there are no rules that allow or deny specific traffic, the security group denies all traffic to or from the instances in it.

The inbound rules in Table 1 ensure that instances in the security group can communicate with each other. Do not delete these rules.

The outbound rules in Table 1 allow instances in the security group to access external networks. If you delete these rules, the instances in the security group cannot access external networks.

**Table 1** Security group rules
Direction	Action	Type	Protocol & Port	Source/Destination
Inbound	Allow	IPv4	All	Source: current security group
Inbound	Allow	IPv6	All	Source: current security group
Outbound	Allow	IPv4	All	Destination: 0.0.0.0/0
Outbound	Allow	IPv6	All	Destination: ::/0

Deleting a Security Group Rule

Go to the security group list page.
In the security group list, click the name of the security group.
The security group details page is displayed.
Click the Inbound Rules or Outbound Rules tab as required.
The security group rule list is displayed.
Locate the target rule and click Delete in the Operation column.
A confirmation dialog box is displayed.
Click OK.

Deleting Multiple Security Group Rules

Go to the security group list page.
In the security group list, click the name of the security group.
The security group details page is displayed.
Click the Inbound Rules or Outbound Rules tab as required.
The security group rule list is displayed.
In the security group rule list, select the target security group rules and click Delete up above the upper left corner of the list.
A confirmation dialog box is displayed.
Click OK.