AWS::RDS::DBSecurityGroup Ingress
The Ingress
property type specifies an individual ingress rule within an
AWS::RDS::DBSecurityGroup
resource.
Note
EC2-Classic was retired on August 15, 2022. If you haven't migrated from EC2-Classic to a VPC, we recommend that
you migrate as soon as possible. For more information, see Migrate from EC2-Classic to a VPC in the
Amazon EC2 User Guide, the blog EC2-Classic Networking is Retiring –
Here’s How to Prepare
Syntax
To declare this entity in your AWS CloudFormation template, use the following syntax:
JSON
{ "CIDRIP" :
String
, "EC2SecurityGroupId" :String
, "EC2SecurityGroupName" :String
, "EC2SecurityGroupOwnerId" :String
}
YAML
CIDRIP:
String
EC2SecurityGroupId:String
EC2SecurityGroupName:String
EC2SecurityGroupOwnerId:String
Properties
CIDRIP
-
The IP range to authorize.
Required: No
Type: String
Update requires: No interruption
EC2SecurityGroupId
-
Id of the EC2 security group to authorize. For VPC DB security groups,
EC2SecurityGroupId
must be provided. Otherwise,EC2SecurityGroupOwnerId
and eitherEC2SecurityGroupName
orEC2SecurityGroupId
must be provided.Required: No
Type: String
Update requires: No interruption
EC2SecurityGroupName
-
Name of the EC2 security group to authorize. For VPC DB security groups,
EC2SecurityGroupId
must be provided. Otherwise,EC2SecurityGroupOwnerId
and eitherEC2SecurityGroupName
orEC2SecurityGroupId
must be provided.Required: No
Type: String
Update requires: No interruption
EC2SecurityGroupOwnerId
-
AWS account number of the owner of the EC2 security group specified in the
EC2SecurityGroupName
parameter. The AWS access key ID isn't an acceptable value. For VPC DB security groups,EC2SecurityGroupId
must be provided. Otherwise,EC2SecurityGroupOwnerId
and eitherEC2SecurityGroupName
orEC2SecurityGroupId
must be provided.Required: No
Type: String
Update requires: No interruption
Examples
Specifying an ingress rule
The following example specifies two security group ingress rules.
JSON
"DBSecurityGroupIngress":[ { "EC2SecurityGroupId":"sg-b0ff1111", "EC2SecurityGroupOwnerId":"111122223333" }, { "EC2SecurityGroupId":"sg-ffd722222", "EC2SecurityGroupOwnerId":"111122223333" } ]
YAML
DBSecurityGroupIngress: - EC2SecurityGroupId: sg-b0ff1111 EC2SecurityGroupOwnerId: '111122223333' - EC2SecurityGroupId: sg-ffd722222 EC2SecurityGroupOwnerId: '111122223333'