Help Center/ Virtual Private Cloud/ User Guide (Ankara Region)/ Getting Started/ Configuring a VPC for ECSs That Access the Internet Using EIPs/ Step 4: Create a Security Group
Updated on 2024-04-15 GMT+08:00
View PDF
Share

Step 4: Create a Security Group

Scenarios

A security group consists of inbound and outbound rules. You can add security group rules to allow or deny the traffic to reach and leave the instances (such as ECSs) in the security group.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and choose Network > Virtual Private Cloud.

    The Virtual Private Cloud page is displayed.

  3. In the navigation pane on the left, choose Access Control > Security Groups.

    The security group list is displayed.

  4. In the upper right corner, click Create Security Group.

    The Create Security Group page is displayed.

  5. Configure the parameters as prompted.
    Table 1 Parameter description

    Parameter

    Description

    Example Value

    Name

    Mandatory

    Enter the security group name.

    The security group name can contain a maximum of 64 characters, which may consist of letters, digits, underscores (_), hyphens (-), and periods (.). The name cannot contain spaces.

    NOTE:

    You can change the security group name after a security group is created. It is recommended that you give each security group a different name.

    sg-AB

    Template

    Mandatory

    A template comes with default security group rules, helping you quickly create security groups. The following templates are provided:

    • Custom: This template allows you to create security groups with custom security group rules.
    • General-purpose web server (default value): The security group that you create using this template is for general-purpose web servers and includes default rules that allow all inbound ICMP traffic and allow inbound traffic on ports 22, 80, 443, and 3389.
    • All ports open: The security group that you create using this template includes default rules that allow inbound traffic on any port. Note that allowing inbound traffic on any port poses security risks.

    General-purpose web server

    Description

    Optional

    Supplementary information about the security group.

    The description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).

    -
  6. Confirm the inbound and outbound rules of the template and click OK.