Manage security groups

A security group is a stateful virtual firewall that is used to provide network access control for one or more EPC instances. For more information about security groups, see Overview of security groups.

When you create a GEPC instance, you can associate a security group with the instance, and add rules to the security group to control the inbound or outbound traffic.

Create a security group

1. Log in to the EPC console.

2. In the left navigation pane, click Security Group.

3. Click Create Security Group.

4. On the Create Security Group page, enter the security group name, select a VPC, and then configure a rule:

   a. On the Inbound Rules or Outbound Rules tab, click Add.

   b. Select a protocol and enter the start port, end port, source IP address, and remarks.

   c. Repeat the preceding steps to add more inbound or outbound rules.

   Note: A security group must contain at least one inbound or outbound rule.

5. Click OK.

   The system starts to create the security group, and displays the Created successfully. message when the security group is created.

Edit inbound or outbound security group rules

The procedure for editing outbound rules is the same as the procedure for editing inbound rules. This section describes how to edit inbound rules.

1. Log in to the EPC console.

2. In the left navigation pane, click Security Group.

3. Select the security group that you want to edit and then click the Edit Inbound Rule button above the list or click Edit Inbound Rule on the Inbound Rules tab.

4. Edit inbound rules as required. You can perform the following tasks:

   • Click Add to add a new rule to the list.

   • Click Export Rules to save the existing inbound rules to a .xlsx file. You can edit and save the file locally.

   • Click Batch Import and select a file to substitute the rules in the file for the current inbound rules.

   To import rules in a batch:

   a. Prepare a .xlsx file that specifies the protocol, behavior, start port, end port, source IP address, and remarks.

   b. On the Edit Security Group Inbound Rule page, click Batch Import.

   c. To back up the existing rules, click Export existing rules in the message that appears.

   d. Click Choose File and select the file prepared.

   e. Confirm that the rules parsed by the system are correct, and then click Import.

   If the operation is successful, you can view the imported entries on the Inbound Rules page.

5. Click OK.

Copy a security group

You can copy existing security groups to other regions or VPCs.

1. Log in to the EPC console.

2. In the left navigation pane, click Security Group.

3. Select the security group that you want to copy and click Copy Security Group.

4. On the Copy Security Group page, complete the following configurations:

   • Select the target region and target VPC.
   • Enter the name of the new security group.
   • Edit inbound rules and outbound rules.

5. Click OK.

   If the message Copied successfully. appears, the security group has been copied. You can then view the copied security group information on the security group page.

Delete a security group

You can delete a security group that is no longer used. However, the default security group in a VPC cannot be deleted.

Prerequisites

Verify that the security group does not contain any EPC instances or KEC instances. Otherwise, the security group cannot be deleted. The procedure for removing an EPC instance from a security group is similar to the procedure for removing a KEC instance. For more information, see Manage EPC instance members.

Procedure

1. Log in to the EPC console.

2. In the left navigation pane, click Security Group.

3. Select one or more security groups that you want to delete and then click Delete.

4. On the confirmation page, click Delete.

   If the message Deleted successfully. appears, the security group has been deleted.

Manage EPC instance members

1. Log in to the EPC console.

2. In the left navigation pane, click Security Group.

3. Select the security group that you want to manage, and then click Manage EPC Instance.

4. On the Manage EPC Instance page, click Add or Remove to add EPC instances to or remove EPC instances from the security group. The list on the left shows the EPC instances that are not added to the security group, and the list on the right shows the EPC instances that are added to the security group.

5. Click OK.