Resource Type: AWS > VPC > Security Group

The Security Group resource type is part of the Amazon Web Services (AWS) VPC service. Each Security Group acts as a virtual firewall for your EC2 instances to control inbound and outbound traffic. It allows you to specify the protocols, ports, and source IP ranges that can reach your EC2 instances, ensuring a secure and controlled networking environment.

Resource Context

Security Group is a part of the VPC service.

Each Security Group lives under a VPC.

Controls

The primary controls for AWS > VPC > Security Group are:

It is also targeted by these controls:

Quick Actions

In Your Workspace

Developers

Resource Type URI

tmod:@turbot/aws-vpc-security#/resource/types/securityGroup

Category URI

tmod:@turbot/turbot#/resource/categories/networking

GraphQL

query resource(id: "tmod:@turbot/aws-vpc-security#/resource/types/securityGroup") { … }

query resourceActivities(filter: "resourceId:'tmod:@turbot/aws-vpc-security#/resource/types/securityGroup'") { … }

mutation createResource(input: { … })

mutation updateResource(input: { … })

CLI

Get Resource

turbot graphql resource --id "tmod:@turbot/aws-vpc-security#/resource/types/securityGroup"

Steampipe Query

Get Resource

select * from guardrails_resource where resource_type_uri = 'tmod:@turbot/aws-vpc-security#/resource/types/securityGroup';

Get Policy Settings (By Resource ID)

select * from guardrails_policy_setting where filter = 'resourceTypeId:"tmod:@turbot/aws-vpc-security#/resource/types/securityGroup"';

Get Resource Notification

select * from guardrails_notification where resource_type_uri = 'tmod:@turbot/aws-vpc-security#/resource/types/securityGroup' and notification_type in ('resource_updated', 'resource_created');