Changing a Security Group

Scenarios

This section describes how to change the security group of a primary DB instance or read replica. For primary/standby DB instances, changing the security group of the primary DB instance will cause the security group of the standby DB instance to be changed as well.

Precautions

You can add or modify rules for the security group associated with your RDS instance, but you cannot disassociate or delete the security group.

Procedure

Log in to the management console.
Click in the upper left corner and select a region and a project.
Click in the upper left corner of the page and choose Databases > Relational Database Service.
On the Instances page, click the target primary DB instance or read replica.
In the Connection Information area on the Basic Information page, click next to the Security Group field.
- To submit the change, click .
- To cancel the change, click .
Changing the security group takes 1 to 3 minutes. Click in the upper right corner on the Basic Information page to view the results.

Managing Security Groups

Log in to the management console.
Click in the upper left corner and select a region and a project.
Click in the upper left corner of the page and choose Databases > Relational Database Service.
On the Instances page, click the DB instance or read replica.
In the Connection Information area on the Basic Information page, click Manage next to the Security Group field.
You can select multiple security groups at a time. The security group rules will be applied based on the following sequence: the first security group associated will take precedence over those associated later, then the rule with the highest priority in that security group will be applied first.

To create a new security group, click Create Security Group.

Using multiple security groups may deteriorate the network performance. You are suggested to select no more than five security groups.

Figure 1 Managing security groups
Click Yes to submit the modification.