Security Group

Security Group Presets

Ready-to-deploy configuration presets for Security Group. Each preset is a complete manifest you can copy, customize, and deploy.

3 presets
01

Web Tier Security Group

This preset creates a security group for internet-facing web servers or load balancers. It allows inbound HTTP (80) and HTTPS (443) traffic from any source and permits all outbound traffic. This is...

02

Database Tier Security Group

This preset creates a security group for database instances that only accepts connections from the application tier. Ingress is restricted to PostgreSQL port 5432 from a specific CIDR block...

03

Bastion Host Security Group

This preset creates a security group for a bastion (jump) host that only accepts SSH connections from trusted IP addresses. Never use `0.0.0.0/0` for bastion SSH access -- always restrict to your...