Importing and Exporting Security Group Rules

Scenarios

If you want to quickly apply the rules of one security group to another, or if you want to modify multiple rules of the current security group at once, you can import or export existing rules.

Security group rules are imported or exported to an Excel file.

Notes and Constraints

When modifying exported security group rules, you can only modify existing fields in the exported file based on the template and cannot add new fields or modify the field names. Otherwise, the file will fail to be imported.

Procedure

1. Log in to the management console.

2. Click in the upper left corner and select the desired region and project.
3. On the console homepage, under Network, click Virtual Private Cloud.
4. In the navigation pane on the left, choose Access Control > Security Groups.
5. On the Security Groups page, click the security group name.
6. Export and import security group rules.
   • Click to export all rules of the current security group to an Excel file.
   • Click to import security group rules from an Excel file into the current security group.
     Table 1 describes the parameters in the template for importing rules.

     Table 1 Template parameters

     Parameter	Description	Example Value
     Direction	The direction in which the security group rule takes effect. Inbound rules control incoming traffic to cloud resources in the security group. Outbound rules control outgoing traffic from cloud resources in the security group.	Inbound
     Protocol & Port	Protocol: The network protocol. Currently, the value can be All, TCP, UDP, ICMP, GRE, or others.	TCP
     	Port: The port or port range over which the traffic can reach your ECS. The value ranges from 1 to 65535.	22, or 22-30
     Source	The source of the security group rule. The value can be a single IP address or a security group to allow access from the IP address or instances in the security group. For example: xxx.xxx.xxx.xxx/32 (IPv4 address) xxx.xxx.xxx.0/24 (IPv4 address range) 0.0.0.0/0 (all IPv4 addresses) sg-abc (security group)	0.0.0.0/0
     Destination	The destination of the security group rule. The value can be a single IP address or a security group to allow access to the IP address or instances in the security group. For example: xxx.xxx.xxx.xxx/32 (IPv4 address) xxx.xxx.xxx.0/24 (IPv4 address range) 0.0.0.0/0 (all IPv4 addresses) sg-abc (security group)	0.0.0.0/0
     Description	Supplementary information about the security group rule. This parameter is optional. The security group rule description can contain a maximum of 255 characters and cannot contain angle brackets (< or >).	-
     Last Modified	The time when the security group was modified.	-