Questions tagged [aws-security-group]

Amazon EC2 Security Groups

Amazon EC2 Security Groups for EC2. A security group acts as a virtual firewall that controls the traffic for one or more instances. When you launch an instance, you associate one or more security groups with the instance.

See Amazon EC2 Security Groups

820 questions
3
votes
4 answers

How Do I Specify a Security Group for Elastic Beanstalk Launch Configuration in CloudFormation Template?

I have the following security group defined in my CloudFormation template: "APIInstanceSG": { "Type": "AWS::EC2::SecurityGroup", "Properties": { "GroupDescription": "Security Group for Application EC2 Instances, "VpcId": "vpc-10a75377", …
3
votes
1 answer

Are AWS Security Group Port Ranges Inclusive or Exclusive

AWS security groups allow a port range to be specified for permitted traffic, written in the form 1234-5678: would that be inclusive of ports 1234 and 5678, or exclusive of either/both of those ports? The documentation doesn't seem to describe this.
James
  • 24,676
  • 13
  • 84
  • 130
3
votes
2 answers

AmazonEC2FullAccess and security

I use Amazon EC2 to host some web sites and databases. I have a new developer joining me tomorrow. If I create an IAM User, and attach the "AmazonEC2FullAccess - arn:aws:iam::aws:policy/AmazonEC2FullAccess- Provides full access to Amazon EC2 via…
3
votes
2 answers

Do we need explicitly setup routing table for the subnet where a public ELB is running within?

(I am trying to understand how ELB networking works within a VPC, and post this question) When we add two subnets to a public ELB, aws elb create-load-balancer --load-balancer-name my-load-balancer --listeners…
chen
  • 4,302
  • 6
  • 41
  • 70
3
votes
3 answers

SSH Connection closed by remote host : Having Security Group SSH Inbound permission set to specific IP address

I am trying to connect to AWS EC2 server from local system using SSH. It is connecting to instance when Security group Inbound permission for SSH is given as connect from anywhere. But whenever it is given specific IP address, it is giving …
vj01
  • 111
  • 1
  • 2
  • 7
3
votes
1 answer

AWS ec2 git clone or pull not working and no error message

I'm trying to clone a bitbucket repo in AWS ec2. But its not working. and not giving any error message. It's only giving message is Cloning into 'repo_name'... I have also tried telnet command. telnet bitbucket.org 443 But it also showing message…
3
votes
2 answers

RDS Security groups - default only working

I'm new to AWS and RDS. I've combed through help files and other stackflow questions, but can't seem to find out if i'm doing something wrong. When I go to my RDS Instance, I see Security Groups:default( active ) I click default, and it takes me to…
user2390363
2
votes
2 answers

Is it possible to solve this circular dependency in AWS CloudFormation?

I have a circular dependency problem. I'm trying to create security group for an autoscaling group that allows traffic to an RDS MySQL DB instance. Similarly I want to create a security group for the RDS instance that allows traffic from the…
2
votes
1 answer

Use of security group for AWS Secrets Manager endpoint

I need to create an endpoint to access AWS Secrets Manager using CloudFormation for rotating secrets. At Using an AWS Secrets Manager VPC endpoint it says: We recommend that you create a Secrets Manager endpoint in the same VPC so that requests…
2
votes
1 answer

Can't connect from outside to Postgres running on AWS EC2 instance

I have installed Postgres 10 on my EC2 ubuntu(18). But I can't access it from my Local Mac. Get this error. My SETUP is: I updated Postgres configs: to /etc/postgresql/10/main/pg_hba.conf added these lines: host all all …
2
votes
2 answers

How does the number of rules in AWS VPC security groups is calculated?

In my control panel I see a security group which has a count of 250 rules, but I only see two rules in the list: What do I miss?
grreeenn
  • 2,287
  • 1
  • 20
  • 27
2
votes
1 answer

AWS Cloudformation - Add condition to security group egress rule

How can I add a condition to an SecurityGroupIngress rule in a Security group resource? So for example if environment parameter is set to "prod" it will open both port 80 and 443 but if its set to "test" it will only open port 80. Example…
2
votes
1 answer

How to access S3 bucket through HTTP?

I have an EC2 instance in public subnet with default NACL and try to connect to S3 bucket through internet. My EC2 has a IAM role that allows access to this S3 bucket. S3 bucket has no bucket policies. I want to connect to this S3 through HTTP, not…
2
votes
1 answer

How are security group rules evaluated?

I am currently working my way through the AWS Certified Solutions Architect - Associate (SAA-C02) Linkedin Learning course and I came across something confusing regarding security groups. During the lecture, the lecturer says that when using…
2
votes
1 answer

How to access RDS instance from EC2 using private ip

I have an EC2 instance with no public IP address and I want it to access my RDS instance. I have put the two instances in the same VPC and subnet. I have tried the following (*) but did not work. Only when I set a public IP address to the Ec2…