Managing the Security Group of an Application

Scenarios

A security group is a logical group that provides access control policies for Elastic Cloud Servers (ECS) and RDS Supabase applications within the same Virtual Private Cloud (VPC) that share the same security requirements and trust relationships.

To ensure the security and stability of your RDS Supabase application, you must configure a security group before using the application to allow the IP addresses and ports that need to access the application.

When accessing a Supabase application through a DNAT-bound EIP, you must configure corresponding inbound rules for the security group associated with the application.

Prerequisites

• You have registered a Huawei ID and enabled Huawei Cloud services.
• You can create an IAM user and user group on the IAM console and grant the user specific operation permissions, to perform refined management on Huawei Cloud. For details, see Using IAM Roles or Policies to Grant Access to RDS.

Precautions

• To ensure data and application security, grant only necessary permissions. Apply the principle of least privilege for database access. Restrict access by setting the allowed IP address to either the remote server's specific address or its smallest subnet range.

  The default source IP address 0.0.0.0/0 allows all IP addresses to access the Supabase application in the security group.

• You must configure security group rules to allow the IP addresses and ports that need to access the application. Only then can the Supabase application be accessed. Before accessing the application, add the IP address or CIDR block that will access the application to the inbound rules of the security group.
• For details about the requirements for adding security group rules, see Adding a Security Group Rule in Virtual Private Cloud User Guide.

Constraints

• Security group configuration cannot be performed for applications that are undergoing active operations. Wait until the operations are complete.
• Supabase application features are unavailable while you are modifying the security group. Perform this operation during off-peak hours to avoid affecting peak-time workloads.

Procedure

1. Log in to the RDS console.
2. Click in the upper left corner and select a region.
3. In the navigation pane, choose AI App Dev Platform.
4. On the AI App Dev Platform page, click the target AI application name to open its details page.
5. On the details page, click Manage under the Security Group field in the Network Info area.
6. In the displayed dialog box, select the target security group and click OK.
   Figure 1 Modifying the security group configuration for the AI application
   

7. Refresh the details page later and check the security group configuration in the Network Info area. Verify that the security group is modified.