Amazon_VPC_6

Ensure security group defined under a VPC

Description

A security group acts as a virtual firewall for your instance to control inbound and outbound traffic. You cannot use the same security groups between EC2-Classic and a VPC. However, if you want your instances in your VPC to have the same security group rules as your EC2-Classic instances, you can use the Amazon EC2 console to copy your existing EC2-Classic security group rules to a new VPC security group.


Important Note :You can only copy security group rules to a new security group in the same AWS account in the same region. If you”ve created a new AWS account, you cannot use this method to copy your existing security group rules to your new account. You”ll have to create a new security group, and add the rules yourself.

Remediation

To copy your security group rules to a new security group

1. Open the Amazon EC2 console at https://console.aws.amazon.com/ec2/.

2. In the navigation pane, choose Security Groups.

3. Select the security group that”s associated with your EC2-Classic instance, then choose Actions and select Copy to new.

4. In the Create Security Group dialog box, specify a name and description for your new security group. Select your VPC from the VPC list.

5. The Inbound tab is populated with the rules from your EC2-Classic security group. You can modify the rules as required. In the Outbound tab, a rule that allows all outbound traffic has automatically been created for you.

Note&nbsp

Service

VPC

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!