Deleting One or More Security Group Rules

If you no longer need one or more security group rules to control the traffic to and from the instances in a security group, you can delete them.

To delete a security group rule, see Deleting a Security Group Rule.

To delete multiple security group rules at a time:

• If there are a small number of rules to be deleted, you can select these rules in the rule list on the console by referring to Deleting Multiple Security Group Ruleson the Console in Batches.
• If there are a large number of rules to be deleted, you can export the rule list to a local Excel file, only keep the rules you want to delete, and import the file to the console. The system then selects the rules to be deleted based on the imported file. For details, see Deleting Multiple Security Group Rules Using an Excel File.

Note that deleting a security group rule may interrupt your services or cause network security risks.

Security group rules are like a whitelist. If there are no rules that allow or deny specific traffic, the security group denies all traffic to or from the instances in it.

• The inbound rules in Table 1 ensure that instances in the security group can communicate with each other. Do not delete these rules.
• The outbound rules in Table 1 allow instances in the security group to access external networks. If you delete these rules, the instances in the security group cannot access external networks.

  Table 1 Security group rules

  Direction	Action	Type	Protocol & Port	Source or Destination
  Inbound	Allow	IPv4	All	Source: current security group
  Inbound	Allow	IPv6	All	Source: current security group
  Outbound	Allow	IPv4	All	Destination: 0.0.0.0/0
  Outbound	Allow	IPv6	All	Destination: ::/0

1. Log in to the management console.

2. Click in the upper left corner and choose Network > Virtual Private Cloud.

   The Virtual Private Cloud page is displayed.

3. In the navigation pane on the left, choose Access Control > Security Groups.

   The security group list is displayed.

4. In the security group list, click the name of the security group.

   The security group details page is displayed.

5. Click the Inbound Rules or Outbound Rules tab as required.

   The security group rule list is displayed.

6. Locate the target rule and click Delete in the Operation column.

   A confirmation dialog box is displayed.

7. Click OK.

1. Log in to the management console.

2. Click in the upper left corner and choose Network > Virtual Private Cloud.

   The Virtual Private Cloud page is displayed.

3. In the navigation pane on the left, choose Access Control > Security Groups.

   The security group list is displayed.

4. In the security group list, click the name of the security group.

   The security group details page is displayed.

5. Click the Inbound Rules or Outbound Rules tab as required.

   The security group rule list is displayed.

6. In the security group rule list, select the target security group rules and click Delete above the upper left corner of the list.

   A confirmation dialog box is displayed.

7. Click OK.

1. Log in to the management console.

2. Click in the upper left corner and choose Network > Virtual Private Cloud.

   The Virtual Private Cloud page is displayed.

3. In the navigation pane on the left, choose Access Control > Security Groups.

   The security group list is displayed.

4. In the security group list, click the name of the security group.

   The security group details page is displayed.

5. Click the Inbound Rules or Outbound Rules tab as required.

   The security group rule list is displayed.

6. In the upper left corner above the security group rule list, click Batch Select.

   The Batch Select dialog box is displayed.

7. Select either of the following methods:
   • Method 1: Click Download Template to download the Excel file to your local PC and fill in the target security group rules in the file.
   • Method 2: Export the existing rules to a local Excel file, filter the target rules and keep them as they are, and save the file.

   After the Excel file is ready, take step 8. The system then automatically selects the target rules based on the imported file.

8. In the Batch Select dialog box, click Add.

   The system starts to match the rules in the Excel file with the existing rules and displays the matching result. The matching items of a security group rule include the priority, action, type, protocol & port, source, and destination.

   • If a rule in the Excel file is matched successfully, Verified is displayed in the Result column. You can perform operations only on the matched rules.
   • If a rule fails to be matched, the causes will be displayed in the Result column. The possible causes are as follows:
     • There is no such rule in this security group.
     • Inconsistent rule direction. For example, you perform the operation on outbound rules on the Inbound Rules tab, or the other way around.
     • Duplicate rules in the Excel file. The system automatically filters out the duplicate rules.

9. Confirm the rules and click OK.

   The security group rule list page is displayed and the target rules are selected automatically.

10. In the upper left corner above the security group rule list, click Delete.

    A confirmation dialog box is displayed.

11. Click OK.