Cloning a Security Group

Scenarios

• For example, you have security group sg-A in region A. If ECSs in region B require the same security group rules as those configured for security group sg-A, you can clone security group sg-A to region B, freeing you from creating a new security group in region B.
• If you need new security group rules, you can clone the original security group as a backup.
• Before you modify security group rules used by a service, you can clone the security group and modify the security group rules in the test environment to ensure that the modified rules work.

Notes and Constraints

• You can clone a security group from the same or a different region.
  • If you want to clone a security group from the same region, you can clone all rules in the security group.
• Only security group rules are cloned, but not the instances associated with the security group. After the clone is complete, you need to add the instances to the new security group. For details, see Adding an Instance to or Removing an Instance from a Security Group.

Procedure

1. Log in to the management console.
2. Click in the upper left corner and choose Network > Virtual Private Cloud.

   The Virtual Private Cloud page is displayed.

3. In the navigation pane on the left, choose Access Control > Security Groups.

   The security group list is displayed.

4. Locate the row that contains the security group, click More in the Operation column, and click Clone.
5. Select the region and name of the new security group as prompted.
6. Click OK.

   You can then switch to the required region to view the cloned security group in the security group list.