Help Center> Virtual Private Cloud> User Guide (ME-Abu Dhabi Region)> Getting Started> Configuring a VPC for ECSs That Do Not Require Internet Access> Step 3: Create a Security Group
Updated on 2024-04-18 GMT+08:00
View PDF

Step 3: Create a Security Group

Scenarios

A security group consists of inbound and outbound rules. You can add security group rules to allow or deny the traffic to reach and leave the instances (such as ECSs) in the security group.

When creating an instance (for example, an ECS), you must associate it with a security group. If no security group has been created yet, a default security group will be created and associated with the instance. You can also create a security group and add inbound and outbound rules to allow specific traffic.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select the desired region and project.
  3. Click in the upper left corner and choose Network > Virtual Private Cloud.

    The Virtual Private Cloud page is displayed.

  4. In the navigation pane on the left, choose Access Control > Security Groups.

    The security group list is displayed.

  5. In the upper right corner, click Create Security Group.

    The Create Security Group page is displayed.

  6. Configure the parameters as prompted.
    Figure 1 Create Security Group
    Table 1 Parameter description

    Parameter

    Description

    Example Value

    Name

    Mandatory

    Enter the security group name.

    The security group name can contain a maximum of 64 characters, which may consist of letters, digits, underscores (_), hyphens (-), and periods (.). The name cannot contain spaces.

    NOTE:

    You can change the security group name after a security group is created. It is recommended that you give each security group a different name.

    sg-AB

    Enterprise Project

    Mandatory

    When creating a security group, you can add the security group to an enabled enterprise project.

    An enterprise project facilitates project-level management and grouping of cloud resources and users. The name of the default project is default.

    For details about creating and managing enterprise projects, see the Enterprise Management User Guide.

    default

    Template

    Mandatory

    The system provides several security group templates for you to create a security group. A security group template has preconfigured inbound and outbound rules. You can select a template based on your service requirements.

    Table 1 describes the security group templates.

    General-purpose web server

    Description

    Optional

    Supplementary information about the security group.

    The security group description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).

    N/A
  7. Confirm the inbound and outbound rules of the template and click OK.