Security group

aws Firewallaws-security-group

Stateful allow-list filter attached to network interfaces.

Provider: aws
Kind: Firewall
Category: Security
Official docs: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html
Also known as: SG

Properties · 5 set by this component

property	type	values	required	kind default	this component
defaultAction	enum	allow \| deny	no	—	▸ deny
defaultInboundRules · component property	enum	none \| self-referencing	no	none	inherited
defaultOutboundAllowAll · component property	boolean	—	no	true	inherited
groupsPerNetworkInterfaceQuota · component property	integer	—	no	5	inherited
intrusionPrevention	boolean	—	no	—	▸ false
logging	boolean	—	no	—	▸ false
managed	boolean	—	no	false	▸ true
ruleCount	integer	—	no	—	inherited
rulesPerGroupQuota · component property	integer	—	no	60	inherited
stateful	boolean	—	no	—	▸ true

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "security-group", component: "aws-security-group" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall DigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# AWS VPC security group: stateful allow-list filter attached to network interfaces.
3# "Control traffic to your AWS resources using security groups" + "Default security groups for your VPCs":
4# stateful, implicit deny for anything not allowed, a new group has no inbound rules and allow-all egress.
5schemaVersion: "1"
6type: "component"
7id: "aws-security-group"
8kind: "firewall"
9provider: "aws"
10docs: "https://docs.aws.amazon.com/vpc/latest/userguide/vpc-security-groups.html"
11aliases: ["SG"]
12defaults:
13  managed: true
14  stateful: true
15  defaultAction: "deny"
16  logging: false
17  intrusionPrevention: false
18properties:
19  defaultInboundRules:
20    type: "enum"
21    values: ["none", "self-referencing"]
22    default: "none"
23  defaultOutboundAllowAll:
24    type: "boolean"
25    default: true
26  rulesPerGroupQuota:
27    type: "integer"
28    default: 60
29  groupsPerNetworkInterfaceQuota:
30    type: "integer"
31    default: 5

The same page as markdown, for an agent: /catalogue/components/aws-security-group.md