Call the RevokeSecurityGroupIngress API to delete a security group inbound rule.

Debug

API Explorer

You can initiate calls online through API Explorer without paying attention to the signature generation process and quickly obtain the call results.

Go to debug

Request parameters

The following only details request parameters specific to this API and key common parameters. More information can be found in Common parameters.

Action String required Example: RevokeSecurityGroupIngress

The interface name. The current API name is RevokeSecurityGroupIngress.

Version String required Example: 2020-04-01

The interface version. Current API version is 2020-04-01.

SecurityGroupId String required Example: sg-bp67acfmxazb4p****

Security group ID.

You can call the DescribeSecurityGroups API to query the security group ID.

Protocol String required Example: all

Protocol type. Valid values:

tcp: TCP protocol.

udp: UDP protocol.

icmp: ICMP protocol.

icmpv6: ICMPv6 protocol.

gre: GRE protocol.

all: All protocols.

PortStart Integer required Example: 22

Start value of the destination port range.

When Protocol is set to tcp or udp, the value range is 1-65535.

When Protocol is set to icmp, icmpv6, or all, the port must be set to -1 (indicating no port restrictions).

PortEnd Integer required Example: 22

End value of the destination port range.

When Protocol is set to tcp or udp, the value range is 1-65535.

When Protocol is set to icmp, icmpv6, or all, the port must be set to -1 (indicating no port restrictions).

CidrIp String optional Example: 10.XX.XX.0/8

Source IPv4 CIDR or IPv6 CIDR.

tip

At least one of the parameters CidrIp, SourceGroupId, or PrefixListId must be provided. If multiple parameters are provided, only one takes effect with the following priority: CidrIp > SourceGroupId > PrefixListId.

SourceGroupId String optional Example: sg-bp67acfmxazb4p****

Source Security Group ID. This means the IP addresses of all Network Interfaces within this security group are used as the source addresses.

tip

At least one of the parameters CidrIp, SourceGroupId, or PrefixListId must be provided. If multiple parameters are provided, only one takes effect with the following priority: CidrIp > SourceGroupId > PrefixListId.

PrefixListId String optional Example: pl-bp1fg655nh68xyz9****

ID of the source address prefix list. This means all CIDR blocks in the prefix list are treated as source addresses.

You can call the DescribePrefixLists API to query the Prefix List ID.

tip

The number of inbound security group rules that can still be added to the current security group is not less than the maximum number of entries in the prefix list.

At least one of the parameters CidrIp, SourceGroupId, or PrefixListId must be provided. If multiple parameters are provided, only one takes effect with the following priority: CidrIp > SourceGroupId > PrefixListId.

Policy String optional Example: accept

Access policy. Resources specified by CidrIp, SourceGroupId, or PrefixListId can access Network Interfaces within the security group. Valid values:

accept: Allow.

drop: Deny.

Priority Integer optional Example: 1

Security group rule priority: A lower number indicates a higher priority.

Value range: 1-100.

Default: 1.

This parameter must be provided if the priority of the security group rule to be deleted is not 1.

Description String optional Example: s_g_ingress_1

Description of the security group rule.

SourcePortStart Integer optional Example: 8080

Start value of the source port range.

When Protocol is set to tcp or udp, the value range is 1 ~ 65535.

When Protocol is set to icmp, icmpv6, or all, only -1 is specified, indicating no port restriction.

tip

The five-tuple security group is currently in invite-only Beta. For trial requests, please contact your account manager.

SourcePortEnd Integer optional Example: 8080

End value of the source port range.

When Protocol is set to tcp or udp, the value range is 1 ~ 65535.

When Protocol is set to icmp, icmpv6, or all, only -1 is specified, indicating no port restriction.

tip

The five-tuple security group is currently in invite-only Beta. For trial requests, please contact your account manager.

LocalCidrIp String optional Example: 192.168.1.0/24

Destination IPv4 CIDR or IPv6 CIDR.

tip

The five-tuple security group is currently in invite-only Beta. For trial requests, please contact your account manager.

Response parameters

Only the response parameters specific to this API are listed below. More information, see Response structure.

RequestId String Example: 2021062415303301022514515207C4****

Request ID.

Request example

Response examples

Error codes

Status code	Error codes	Error message	Notes
400	DryRunOperation	Exception raised to indicate a successfully authorized action when the DryRun flag is set to true.	This request is set to DryRun. The action is authorized but not executed.
400	InvalidCidr.AddressMismatch	The network types of the specified source and destination CIDRs are different.	The source and destination CIDR blocks must be of the same type.
400	InvalidCidr.Malformed	The specified cidr block is malformed.	The format of the specified CIDR block is invalid.
400	InvalidCidr.ProtocolMismatch	The specified cidr block mismatch the protocol type.	The specified CIDR block format does not match the protocol type.
400	InvalidDescription.Malformed	The specified description is malformed.	The specified description format is invalid. Correct the description format and retry.
400	InvalidDescription.Malformed	The specified description is malformed. Ensure the maximum length of description is 255.	The format specified for the description is invalid. A description must not exceed 255 characters.
400	InvalidRouteCidr.Malformed	The specified CIDR is malformed.	The specified CIDR block is invalid.
400	InvalidSecurityGroup.InvalidStatus	The specified security group is not in the correct status for the request.	The specified security group is in a state that cannot respond to this request.
400	InvalidSecurityGroup.VpcMismatch	The specified source security group is not in the specified VPC.	The referenced security group is not in the specified VPC.
400	InvalidSecurityRule.InvalidSourceStatus	The specified source security group is not in the correct status for the request.	The source security group associated with the specified security group rule is in a state that cannot process this request.
400	InvalidSecurityRule.InvalidStatus	The specified security rule is not in the correct status for the request.	The specified security group rule in a state that cannot respond to this request.
400	InvalidSecurityRule.Malformed	The source address of specified security group rule is invalid. CIDR-only security group does not support security group as source address.	The source address of the security group rule is invalid. CIDR-based security groups do not support security groups as source addresses.
400	InvalidSecurityRule.Malformed	The source address of specified security group rule is invalid. CIDR-only security group is not supported as source address.	The source address of the specified security group rule is invalid. CIDR-based security groups do not support being used as source addresses.
400	InvalidSecurityRulePolicy.Malformed	The specified security rule policy is malformed.	The action of specified security group rule is invalid.
400	InvalidSecurityRulePort.Malformed	The specified security rule port is malformed.	The port of specified security group rule is invalid.
400	InvalidSecurityRulePriority.Malformed	The specified security rule priority is malformed.	The specified security group rule priority is invalid.
400	InvalidSecurityRuleProtocol.Malformed	The specified security rule protocol is malformed.	The protocol of the specified security group rules is invalid.
403	Forbidden	You are not authorized to operate five tuple rule on the specified security group.	You do not have permission to execute operations on Five-tuple rules for the specified security group.
403	Forbidden	You are not authorized to perform operations on the specified security group. The specified security group is a service-managed security group.	No sufficient permissions to perform this operation on the specified security group. The specified security group is managed by the cloud product.
404	InvalidPrefixList.NotFound	The specified prefix list does not exist.	The specified Prefix List does not exist.
404	InvalidPrefixListAssociation.NotFound	The specified prefix list is not associated with the specified resource.	The specified prefix list is not referenced by this resource.
404	InvalidSecurityGroupId.NotFound	The specified security group does not exist.	The specified security group does not exist.
404	InvalidSecurityRule.NotFound	The specified security rule does not exist.	The specified security group rule does not exist.

Virtual Private Cloud