Docs

Elastic Compute Service

Security group

Viewing/Modifying security group rules

Applicable scenarios

As your business grows or you adjust or migrate services, you may need to tighten or loosen access permissions to your ECS instances. To achieve this, you can modify security group rules. For example, you can tighten remote access permissions by changing the policy from allowing any terminal remote login to allowing only specified terminals.

For use cases of security groups, refer to Security group use cases.

Usage note

Changes to security group rules take effect immediately.

Procedure

View/Modify access rules in the ECS console

In the top menu bar, select the target region.

In the left-side navigation pane, click "Instances".

Click the name of the target instance.

On the "Security Group" tab, view the rule status of network interfaces associated with the instance.

Click "Edit rule" on the right side of the target security group to modify or add rules.

Add rules: After selecting the tab of outbound or inbound rules, you can click "Add rule" to add outbound or inbound rules.

You can click "Add rule" to add multiple rules in sequence and add up to 10 rules each time.

Modify rules: After selecting the tabs of outbound/inbound rules, you can click the "Modify" button next to the target security group rule to edit it.

Click "Add". The action is complete.

View/modify access rules in the Security Group console

In the top menu bar, select a region.

Click "Edit rule" in the "Actions" column on the right side of the target security group to view current rules.

Then, select to modify or add rules.

Add rules: After selecting the tab of outbound or inbound rules, you can click "Add rule" to add outbound or inbound rules.

You can click "Add rule" to add multiple rules in sequence.

Modify rules: After selecting the tabs of outbound/inbound rules, you can click the "Modify" button next to the target security group rule to edit it.

Click "Save". The action is complete.

FAQs

Why can't I access services deployed on an ECS instance after I configure the security group for the instance?

How can I see whether ports enabled in a security group take effect?