RDS for PostgreSQL supports associating ECS security groups. After binding the ECS security group, if the ECS security group is updated, it can be synchronized as an allowlist in RDS for PostgreSQL.

Prerequisites

There is an allowlist associated with the ECS security group.

If the target allowlist has an associated instance, the instance's status needs to be running.

Precautions

When synchronizing security groups, RDS for PostgreSQL automatically recognizes IP changes that exist in allowlist security groups and updates the IP information in the allowlist. Please confirm whether the removal of the IP from the associated security group from the allowlist will affect business.

An allowlist can support up to 300 IPs or IP segments. If the associating security group involves an IP or the IP segment exceeds the limit, the synchronization will fail.

Procedure

In the upper left corner of the top menu bar, select the region to which the allowlist belongs.

Click on Instances in the left navigation bar.

Click ... > Sync security group in the Actions column of the target allowlist, confirm the IP changes before and after synchronization in the pop-up dialog box, and click OK after confirming that it is correct.

Last updated: 2025.11.17 16:15:15

Public security network record in Beijing: No. 11010802032137