aws.ec2.SecurityGroup

Security group description. Defaults to Managed by Pulumi. Cannot be "". NOTE: This field maps to the AWS GroupDescription attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use tags.

Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Name of the security group. If omitted, the provider will assign a random, unique name.

Creates a unique name beginning with the specified prefix. Conflicts with name.

Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default false.

Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

VPC ID. Defaults to the region's default VPC.

Security group description. Defaults to Managed by Pulumi. Cannot be "". NOTE: This field maps to the AWS GroupDescription attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use tags.

Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Name of the security group. If omitted, the provider will assign a random, unique name.

Creates a unique name beginning with the specified prefix. Conflicts with name.

Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default false.

Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

VPC ID. Defaults to the region's default VPC.

Security group description. Defaults to Managed by Pulumi. Cannot be "". NOTE: This field maps to the AWS GroupDescription attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use tags.

Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Name of the security group. If omitted, the provider will assign a random, unique name.

Creates a unique name beginning with the specified prefix. Conflicts with name.

Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default false.

Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

VPC ID. Defaults to the region's default VPC.

Security group description. Defaults to Managed by Pulumi. Cannot be "". NOTE: This field maps to the AWS GroupDescription attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use tags.

Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Name of the security group. If omitted, the provider will assign a random, unique name.

Creates a unique name beginning with the specified prefix. Conflicts with name.

Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default false.

Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

VPC ID. Defaults to the region's default VPC.

Security group description. Defaults to Managed by Pulumi. Cannot be "". NOTE: This field maps to the AWS GroupDescription attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use tags.

Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Name of the security group. If omitted, the provider will assign a random, unique name.

Creates a unique name beginning with the specified prefix. Conflicts with name.

Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default false.

Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

VPC ID. Defaults to the region's default VPC.

Security group description. Defaults to Managed by Pulumi. Cannot be "". NOTE: This field maps to the AWS GroupDescription attribute, for which there is no Update API. If you'd like to classify your security groups in a way that can be updated, use tags.

Configuration block for egress rules. Can be specified multiple times for each egress rule. Each egress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Configuration block for ingress rules. Can be specified multiple times for each ingress rule. Each ingress block supports fields documented below. This argument is processed in attribute-as-blocks mode.

Name of the security group. If omitted, the provider will assign a random, unique name.

Creates a unique name beginning with the specified prefix. Conflicts with name.

Instruct the provider to revoke all of the Security Groups attached ingress and egress rules before deleting the rule itself. This is normally not needed, however certain AWS services such as Elastic Map Reduce may automatically add required rules to security groups used with the service, and those rules may contain a cyclic dependency that prevent the security groups from being destroyed without removing the dependency first. Default false.

Map of tags to assign to the resource. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

VPC ID. Defaults to the region's default VPC.

ARN of the security group.

The provider-assigned unique ID for this managed resource.

Owner ID.

A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated:

Please use tags instead.

ARN of the security group.

The provider-assigned unique ID for this managed resource.

Owner ID.

A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated:

Please use tags instead.

ARN of the security group.

The provider-assigned unique ID for this managed resource.

Owner ID.

A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated:

Please use tags instead.

ARN of the security group.

The provider-assigned unique ID for this managed resource.

Owner ID.

A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated:

Please use tags instead.

ARN of the security group.

The provider-assigned unique ID for this managed resource.

Owner ID.

A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated:

Please use tags instead.

ARN of the security group.

The provider-assigned unique ID for this managed resource.

Owner ID.

A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Deprecated:

Please use tags instead.

Start port (or ICMP type number if protocol is icmp)

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument in the IpPermission API reference.

End range port (or ICMP code if protocol is icmp).

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the destination of the traffic.

List of CIDR blocks.

Description of this egress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this egress rule.

Start port (or ICMP type number if protocol is icmp)

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument in the IpPermission API reference.

End range port (or ICMP code if protocol is icmp).

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the destination of the traffic.

List of CIDR blocks.

Description of this egress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this egress rule.

Start port (or ICMP type number if protocol is icmp)

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument in the IpPermission API reference.

End range port (or ICMP code if protocol is icmp).

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the destination of the traffic.

List of CIDR blocks.

Description of this egress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this egress rule.

Start port (or ICMP type number if protocol is icmp)

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument in the IpPermission API reference.

End range port (or ICMP code if protocol is icmp).

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the destination of the traffic.

List of CIDR blocks.

Description of this egress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this egress rule.

Start port (or ICMP type number if protocol is icmp)

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument in the IpPermission API reference.

End range port (or ICMP code if protocol is icmp).

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the destination of the traffic.

List of CIDR blocks.

Description of this egress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this egress rule.

Start port (or ICMP type number if protocol is icmp)

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument in the IpPermission API reference.

End range port (or ICMP code if protocol is icmp).

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the destination of the traffic.

List of CIDR blocks.

Description of this egress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this egress rule.

Start port (or ICMP type number if protocol is icmp or icmpv6).

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument on the IpPermission API reference.

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the source of the traffic.

End range port (or ICMP code if protocol is icmp).

List of CIDR blocks.

Description of this ingress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this ingress rule.

Start port (or ICMP type number if protocol is icmp or icmpv6).

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument on the IpPermission API reference.

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the source of the traffic.

End range port (or ICMP code if protocol is icmp).

List of CIDR blocks.

Description of this ingress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this ingress rule.

Start port (or ICMP type number if protocol is icmp or icmpv6).

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument on the IpPermission API reference.

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the source of the traffic.

End range port (or ICMP code if protocol is icmp).

List of CIDR blocks.

Description of this ingress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this ingress rule.

Start port (or ICMP type number if protocol is icmp or icmpv6).

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument on the IpPermission API reference.

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the source of the traffic.

End range port (or ICMP code if protocol is icmp).

List of CIDR blocks.

Description of this ingress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this ingress rule.

Start port (or ICMP type number if protocol is icmp or icmpv6).

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument on the IpPermission API reference.

The following arguments are optional:

Note Although cidr_blocks, ipv6_cidr_blocks, prefix_list_ids, and security_groups are all marked as optional, you must provide one of them in order to configure the source of the traffic.

End range port (or ICMP code if protocol is icmp).

List of CIDR blocks.

Description of this ingress rule.

List of IPv6 CIDR blocks.

List of Prefix List IDs.

List of security groups. A group name can be used relative to the default VPC. Otherwise, group ID.

Whether the security group itself will be added as a source to this ingress rule.

Start port (or ICMP type number if protocol is icmp or icmpv6).

Protocol. If you select a protocol of -1 (semantically equivalent to all, which is not a valid value here), you must specify a from_port and to_port equal to 0. The supported values are defined in the IpProtocol argument on the IpPermission API reference.