Security Group
Rule set attached to VMs that denies inbound flows until a rule allows them.
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| defaultAction | enum | allow | deny | no | — | ▸ deny |
| defaultInboundRules | enum | none | self-referencing | no | none | inherited |
| defaultOutboundAllowAll | boolean | — | no | true | inherited |
| intrusionPrevention | boolean | — | no | — | inherited |
| logging | boolean | — | no | — | inherited |
| managed | boolean | — | no | false | ▸ true |
| outboundFiltering | enum | net-only | none | no | net-only | inherited |
| ruleCount | integer | — | no | — | inherited |
| stateful | boolean | — | no | — | inherited |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "security-group", component: "outscale-security-group" }Cloud Firewallalibaba-cloud-firewallNetwork ACLalibaba-network-aclECS Security Groupalibaba-security-groupNetwork ACLaws-network-aclAWS Network Firewallaws-network-firewallAmazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallSecurity groupaws-security-groupMicrosoft Entra Internet Accessazure-entra-internet-accessAzure Firewallazure-firewallNetwork Security Groupazure-network-security-groupNetwork security perimeterazure-network-security-perimeterCloudflare DNS Firewallcloudflare-dns-firewallCloudflare Gatewaycloudflare-gatewayCloudflare Network Firewallcloudflare-network-firewallGeneric firewallfirewallFirewall appliancefirewall-applianceFortinet FortiGatefortigateMikroTik RouterOSmikrotik-routerosnftablesnftablesOPNsenseopnsensePalo Alto Networks NGFWpalo-alto-ngfwpfSensepfsenseSnortsnortSuricatasuricataVyOSvyosDigitalOcean Cloud Firewallsdigitalocean-cloud-firewallCloud IDSgoogle-cloud-idsCloud NGFWgoogle-cloud-ngfwSecure Web Proxygoogle-secure-web-proxyIBM Cloud Hardware Firewallibm-firewallVPC Security Groupibm-security-groupNetworkPolicyk8s-network-policyNetwork Firewalloci-network-firewallNetwork Security Groupoci-network-security-groupSecurity Listoci-security-list
# yaml-language-server: $schema=../../schema/component.schema.json # OUTSCALE security group: the rule set attached to VMs that decides which flows reach them # ("About Security Groups"). That page states the defaults: a security group allows no inbound # flow unless you add a rule, the default group of a Net lets VMs of that group talk to each # other in TCP, UDP and ICMP, a group created in a Net starts with one rule allowing all # outbound flows, and in a Net both inbound and outbound flows are filtered while in the # public Cloud only inbound flows are ("About VMs"). schemaVersion: "1" type: "component" id: "outscale-security-group" kind: "firewall" provider: "outscale" docs: "https://docs.outscale.com/en/userguide/About-Security-Groups.html" defaults: managed: true defaultAction: "deny" properties: defaultInboundRules: type: "enum" values: ["none", "self-referencing"] default: "none" defaultOutboundAllowAll: type: "boolean" default: true outboundFiltering: type: "enum" values: ["net-only", "none"] default: "net-only"