RDS for PostgreSQL
RDS for PostgreSQL
RDS for PostgreSQL
Document
What's new
Product announcement
Overview
Billing
Quick start
User guide
Managing instances
Modifying the specification
Managing tags
Managing connections
Connecting to an instance
Managing connection endpoints
Service availability
Managing accounts
Managing databases
Managing schemas
Monitoring and alerts
Backup recovery
Data backup
Managing logs
Data security
Managing the allowlist (new version)
Configuring SSL encryption
Configuring parameters
Operation and maintenance events
Task center
Extensions
API reference
V2(2022-01-01)
Managing instances
Managing accounts
Managing schemas
Managing connections
Managing parameters
Backup and recovery
Managing logs
Event management
Data security
Task management
SDK reference
Developer tool
Best practices
Performance document
FAQs
Terms
- Documentation
RDS for PostgreSQL User guideData securityManaging the allowlist (new version)Modifying an allowlist
Copy page
Download PDFManaging the allowlist (new version)
Modifying an allowlist
Copy pageDownload PDFModifying an allowlist
This article introduces the operation process of modifying the allowlist.
Precautions
- After modifying the allowlist, the modification will be synchronized to all instances associated to the allowlist.
- If you remove certain IP addresses, those IP addresses will no longer be able to access those database instances associated to the allowlist, so please proceed with caution.
Usage restrictions
- Each allowlist can contain up to 300 IP addresses or IP address segments.
- The total number of IP addresses or IP address segments in all allowlists associated with each instance cannot exceed 300. When there are many IP addresses, it is recommended to merge scattered IP addresses into IP address segments.
- It is forbidden to add IP addresses in the form x.x.x.x/0 other than 0.0.0.0/0 to the allowlist.
Procedure
- Login to the RDS for PostgreSQL console.
- In the upper left corner of the top menu bar, select the region to which the allowlist belongs.
- Click Allowlists on the left navigation bar.
- Click the Edit button in the Actions column of the target allowlist to enter the Modify allowlist information page.
- Complete the settings in the Edit allowlist information panel and click OK.
- ParametersNoteAllowlist nameRequired The naming convention for allowlist names is as follows:
- Within the current region, the allowlist name is unique.
- Begin with Chinese, a letter, or an underscore (_).
- Can only contain Chinese characters, letters, digits, underscores (_) and hyphens(-).
- The name length is limited to 1~128 characters.
DescriptionOptional. The description information can be used to search for the allowlist in the allowlist list, and the length of the description should not exceed 200 characters.IP addressRequired. Only IP addresses added to the allowlist can access the instance. Supports pasting IP addresses or IP address segments, separated by Chinese and English commas, spaces or newlines.Default allowlistSelect whether to use the default allowlist. After the tenant dimension is set to the default allowlist, this allowlist is selected by default when creating an instance.tip- An allowlist can associate up to 500 instances. After exceeding the upper limit, please modify the default allowlist.
- If you specify a allowlist as the default allowlist when creating or editing it, the allowlist will replace the default allowlist (if any).
Security groupRDS for PostgreSQL allowlist supports associating ECS security groups. If you adjust the ECS security group after the association, you can synchronize the security group in RDS for PostgreSQL allowlist to get the latest IP list in a timely manner.Click Select security group, select the security group you want to associate in the Edit security group window, and then click OK. Support for binding through two modes:- Associated ECSIP: Allows the ECS within the security group to access the database, currently only the IP information import of the main network interface card is supported.
- Inbound IP: Allow IP access to the database involved in the TCP and ALL protocols in the source address of the security group entry direction. If the source address is configured as security group, it will be ignored.
tip- Each allowlist can add up to 10 security groups.
- ECS security groups can be associated in two ways simultaneously.
- When binding a security group using Inbound IP mode, an address in the security group is not added to the PostgreSQL allowlist if the policy is Denied.
Related APIs
API | Description |
Call the ModifyAllowList API to modify the whitelist. |
Last updated: 2025.11.17 20:31:11
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
