Stack Overflow
Stack Overflow

Questions tagged [aws-security-group]

Amazon EC2 Security Groups

Amazon EC2 Security Groups for EC2. A security group acts as a virtual firewall that controls the traffic for one or more instances. When you launch an instance, you associate one or more security groups with the instance.

See Amazon EC2 Security Groups

820 questions
340
votes
28 answers

Cannot ping AWS EC2 instance

I have an EC2 instance running in AWS. When I try to ping from my local box it is not available. How can I make the instance pingable?
santosh s
  • 3,429
  • 2
  • 13
  • 5
131
votes
5 answers

AWS: What does 0.0.0.0/0 and ::/0 mean?

In security group, every inbound port I add, two rules are added, one for 0.0.0.0/0, the other ::/0. What do they each mean?
user788454
88
votes
6 answers

You may not specify a referenced group id for an existing IPv4 CIDR rule. prompt when editing the Inbound rule in AWS Security Group

In AWS EC2, I start a Classical Load Balancer in front of EC2 instance (security group of EC2 instance is launch-wizard-3). I want to change the inbound rule of Security Group of EC2 instance . A security group for Classical Load Balancer (its name…
sajeewaI-
  • 3,755
  • 2
  • 5
  • 11
56
votes
6 answers

Allow AWS Lambda to access RDS Database

I am trying to connect to RDS Database from an AWS Lambda (Java). Which IP should I enable from the RDS Security group rules?
giò
  • 3,402
  • 7
  • 27
  • 54
29
votes
3 answers

AWS Security group include another Security Group

From the doc: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html#security-group-rules Source or destination: The source (inbound rules) or destination (outbound rules) for the traffic. Specify one of these…
Fran
  • 3,693
  • 4
  • 19
  • 19
28
votes
1 answer

What Port Does AWS S3 Use?

I have a question because of error which I Faced due to configs some other person made in aws : Short Question is what port Does AWS S3 use to communicate to ec2-instance ?
Kush Vyas
  • 5,813
  • 2
  • 26
  • 36
26
votes
6 answers

Can I add dns name in aws security group

I have to connect my dynamic IP(which changes every time) to the AWS EC2 machine. For this I mapped my public IP to the domain name(xyz.com), now I am trying to add it to security group. But AWS security group not allowing to add DNS names. Is it…
sk.bng88
  • 393
  • 1
  • 3
  • 8
22
votes
1 answer

self-reference not allowed in Security Group definition

I am trying to create an sg with Terraform. I want all instances of a particular SG to have all communication allowed among them, so I am adding the SG itself to the ingress rules as follows: resource "aws_security_group" "rancher-server-sg" { …
pkaramol
  • 16,451
  • 43
  • 149
  • 324
20
votes
4 answers

self referencing aws security groups

my application has ELB, NGNIX and ECS in the web component layer and I am grouping all of them in to one security group and there is internal communication between ELB, NGNIX and ECS. I wanted to create self referential ports for the communication…
user10146200
  • 251
  • 1
  • 3
  • 6
18
votes
1 answer

What format to use when entering an IP address into an EC2 Security Group rule?

I am trying to configure secure ssh connection from bastion host (located in public subnet) to private linux instances (located in private subnet) in the same VPC. When I add a security group rule for my private linux instance, initially it shows…
Alagesan Palani
  • 1,984
  • 4
  • 28
  • 53
17
votes
2 answers

AWS Instance Only Allow Traffic From Load Balancer

I have a Load Balancer and Auto-Scaling Group. The Load Balancer sends traffic to my Auto-Scaling Group. I have two instances: Instance 7000 (which is listening on port 7000 and is part of the auto-scaling group and gets its traffic from the load…
connorvo
  • 761
  • 2
  • 7
  • 21
16
votes
4 answers

How do you assign a VPC and security group to a Lambda in AWS CDK?

I have an AWS CDK stack with a lambda function that needs to insert into an RDS database. When the stack is deployed, the lambda function cannot access the database and gives an error: getaddrinfo ENOTFOUND [RDS endpoint as defined by me]. After…
Robin
  • 612
  • 1
  • 5
  • 12
16
votes
3 answers

What is the best way to restrict access to an Application Load Balancer?

Ideally, I'd like to lock down my ALB so that it can only be accessed by API Gateway. I've looked into whether I can associate API gateway with an Inbound Rule - however, I have found that API Gateway cannot be associated with an IP address, or a…
fuzzi
  • 1,967
  • 9
  • 46
  • 90
15
votes
3 answers

Security Group and Subnet Belongs to different networks

I am creating a basic AWS CloudFormation Template with one VPC, 3 Security Group and 5 EC2 Instances my security group looks something like this - { "WebApplicationServerSG": { "Type": "AWS::EC2::SecurityGroup", "Properties": { …
Jeet
  • 5,569
  • 8
  • 43
  • 75
14
votes
5 answers

EC2 instance 'took too long to respond'

I have a site built on NodeJS, which I am currently trying to deploy on the free tier on AWS. So far I have created an instance, launched it, I can connect via SSH (console) to my instance, and have successfully pulled my files from my Git…
Harry
  • 325
  • 1
  • 4
  • 12
1
2 3
…
54 55