Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

In AWS EC2, what does a security group with no inbound rules mean?

Does it mean that no inbound access whatsoever is allowed on the instance?

like image 966
Bob Risky Avatar asked Nov 11 '15 23:11

Bob Risky


People also ask

What is inbound rule in AWS security group?

Inbound rules control the incoming traffic to your instance, and outbound rules control the outgoing traffic from your instance. When you launch an instance, you can specify one or more security groups. If you don't specify a security group, Amazon EC2 uses the default security group.

What is the significance of using security group A in the source field of inbound rules of a security group B?

Referencing a security group in the source field does not provide rule inheritance. Referencing a group in this way allows inbound access to group B from resources in A. Note that you can assign multiple security groups to a single instance.

When creating a new security group all inbound traffic is allowed by default?

Terms in this set (24) When creating a new security group, all inbound traffic is allowed by default. A newly created Security Group has no Inbound rules (denies all traffic) and allows all outbound traffic.


1 Answers

No rules in a security group means that no remote IP Address can access your instance on any protocol.

However, it's important to remember that security groups are stateful. So if you have an outbound rule in your security group for eg. HTTP and you send a HTTP request from your instance to a remote HTTP server, the instance will be able to receive the response, even though port 80 is blocked by your security group.

When a connection is made to or from an instance, a "state" is created that allows bidirectional communication - but only for that connection.

You can read more about this in the docs here

like image 102
mickzer Avatar answered Oct 22 '22 07:10

mickzer