Security Group

Security Group Presets

Ready-to-deploy configuration presets for Security Group. Each preset is a complete manifest you can copy, customize, and deploy.

3 presets
01

Web Tier Security Group

This preset creates a security group suitable for public-facing web servers or load balancers. It allows HTTP (port 80) and HTTPS (port 443) inbound from any source, with unrestricted outbound access.

02

Database Tier Security Group

This preset creates a locked-down security group for database instances (RDS, PolarDB, Redis, MongoDB). It only allows connections on standard database ports from the VPC CIDR range, with no public...

03

Bastion Host Security Group

This preset creates a security group for bastion (jump) hosts that serve as the single entry point into a VPC. It allows SSH inbound from a trusted network and restricts outbound to SSH and database...