Skip to main content
Version: Next

security_group_rule

Table to manage AWS security group rules. The rules of a security group control the inbound traffic that's allowed to reach the instances that are associated with the security group. The rules also control the outbound traffic that's allowed to leave them.

See

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules.html

Columns​

• Optional cidr_ipv4: string

IPV4 CIDR referenced by this rule

See

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html

• Optional cidr_ipv6: string

IPV6 CIDR referenced by this rule

See

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html

• Optional description: string

Description for the security group rule

• Optional from_port: number

Initial port to allow for an specific range. Minimum is 0

See

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html

• Optional ip_protocol: string

The protocol to allow. The most common protocols are 'tcp', 'udp' and 'icmp'

See

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html

• is_egress: boolean

If true, represents a rule for outbound traffic

• Optional prefix_list_id: string

Reference for the rule prefix list. A managed prefix list is a set of one or more CIDR blocks.

See

https://docs.aws.amazon.com/vpc/latest/userguide/managed-prefix-lists.html

• region: string

Region for the security group rule

• security_group: security_group

Reference for the security group associated to this rule

• Optional security_group_rule_id: string

AWS ID representing the security group rule

• Optional source_security_group: security_group

Reference for the source security group associated to the rule. By specifying a VPC security group as the source, you allow incoming traffic from all instances (typically application servers) that use the source VPC security group.

See

https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html

• Optional to_port: number

Final port to allow for an specific range. Maximum is 65535

See

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-rules-reference.html