Skip to content
To change an AWS EC2 instance’s security group, open the Amazon EC2 Console and Select “Instances.” Click “Change Security Groups” under “Actions” and select the security group to assign an instance. You can remove pre-existing security groups by choosing “Remove” then save.
Security groups control traffic within an EC2 according to preset inbound and outbound rules. They provide instance-level security, and you can apply them to one or more instances. There should be one instance associated with at least one security group.
Security groups consist of a set of rules that manage both inbound and outbound traffic on instances. Ideally, they function like virtual firewalls and should form a defense for existing instances.
AWS automatically assigns a default security group upon launching EC2 instances in Virtual Private Cloud (VPC). Security groups apply to the instances assigned by the user during launch or after creating the instance. You can either add rules to the default security group or delete them entirely.
How to Create a New Security Group
You can create a security group through the AWS Management Console. In the console, select ‘‘Security Groups” followed by the “Create Security Group” button.
Create a default security group name and add a description saying how you intend to use the security group. A unique name helps to distinguish it from other security groups. After adding a short description, make sure you assign it to a specific VPC where it will reside.
Once you have entered the basic details, configure both inbound and outbound rules.
Best Practices for AWS EC2 Instances’ Security Groups
Review Security Groups Associated with Instances
Categorize Security Groups
Restrict Access to EC2 Security Groups
Minimize Use of Multiple Security Groups
Using nOps to Audit Security Groups
You can use nOps to audit security groups and increase your organization’s security and compliance. With nOps auditing, you can identify risks and streamline your security groups for maximum security.
Schedule a Demo to start with nOps!
nOps Changesets integrates with Git and Terraform to streamline the process of identifying and fixing code related to storage optimization. This not only reduces manual work but also speeds up the process of implementing cost-saving measures.
using nOps certified integration with Amazon EventBridge, we can intelligently update configurations on resources that are not controlled by IaC. This results in up to 20% cost savings and enables organizations to enact bulk automated updates of storage, further increasing efficiency.
Seamlessly integrate with GitLab and GitHub, providing a centralized hub to manage recommendations. Empower engineers to take action, make efficient decisions, and continuously improve resource allocation.
