Creating a Security Group

A security group consists of inbound and outbound rules to control the traffic that is allowed to flow into or out of instances (such as ECSs) in the security group. Security group rules are commonly used to allow or deny network traffic from specific sources or over specific protocols, block certain ports, and define specific access permissions for instances.

Several security group templates are provided for you to create a security group. A security group template has preconfigured inbound and outbound rules. You can select a template based on your service requirements. Table 1 describes the security group templates.

1. Log in to the management console.
2. Click in the upper left corner and choose Network > Virtual Private Cloud.

   The Virtual Private Cloud page is displayed.

3. In the navigation pane on the left, choose Access Control > Security Groups.

   The security group list is displayed.

4. In the upper right corner, click Create Security Group.

   The Create Security Group page is displayed.

5. Configure the parameters as prompted.

   Table 2 Parameter description

   Parameter	Description	Example Value
   Name	Mandatory The name of the security group. The name: Can contain 1 to 64 characters. Can contain letters, digits, underscores (_), hyphens (-), and periods (.). NOTE: You can change the security group name after a security group is created. It is recommended that you give each security group a different name.	sg-AB
   Enterprise Project	Mandatory When creating a security group, you can add the security group to an enabled enterprise project. An enterprise project facilitates project-level management and grouping of cloud resources and users. The name of the default project is default. For details about creating and managing enterprise projects, see the Enterprise Management User Guide.	default
   Template	Mandatory The system provides several security group templates for you to create a security group. A security group template has preconfigured inbound and outbound rules. You can select a template based on your service requirements. Table 1 describes the security group templates.	General-purpose web server
   Description (Optional)	Optional Supplementary information about the security group. The description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).	N/A

6. Confirm the inbound and outbound rules of the template and click OK.

• After a security group is created, if its rules cannot meet your service requirements, you can add new rules to the security group or modify original rules. For details, see Adding a Security Group Rule.
• Each cloud server must be associated with at least one security group. You can add a cloud server to multiple security groups based on service requirements. For details, see Adding an Instance to or Removing an Instance from a Security Group.