REVOKEDBSECURITYGROUPINGRESS()`¶

About RevokeDBSecurityGroupIngress¶

Revokes ingress from a DBSecurityGroup for previously authorized IP ranges or EC2 or VPC security groups. Required parameters for this API are one of CIDRIP, EC2SecurityGroupId for VPC, or (EC2SecurityGroupOwnerId and either EC2SecurityGroupName or EC2SecurityGroupId).

EC2-Classic was retired on August 15, 2022. If you haven't migrated from EC2-Classic to a VPC, we recommend that you migrate as soon as possible. For more information, see Migrate from EC2-Classic to a VPC in the Amazon EC2 User Guide, the blog EC2-Classic Networking is Retiring – Here’s How to Prepare, and Moving a DB instance not in a VPC into a VPC in the Amazon RDS User Guide.

Method Signature¶

METHODS /AWS1/IF_RDS~REVOKEDBSECURITYGROUPINGRESS
  IMPORTING
    !IV_DBSECURITYGROUPNAME TYPE /AWS1/RDSSTRING OPTIONAL
    !IV_CIDRIP TYPE /AWS1/RDSSTRING OPTIONAL
    !IV_EC2SECURITYGROUPNAME TYPE /AWS1/RDSSTRING OPTIONAL
    !IV_EC2SECURITYGROUPID TYPE /AWS1/RDSSTRING OPTIONAL
    !IV_EC2SECURITYGROUPOWNERID TYPE /AWS1/RDSSTRING OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_rdsrvkdbsecgroupingrs
  RAISING
    /AWS1/CX_RDSAUTHNOTFOUNDFAULT
    /AWS1/CX_RDSDBSECGRNOTFNDFAULT
    /AWS1/CX_RDSINVDBSECGRSTATEF00
    /AWS1/CX_RDSCLIENTEXC
    /AWS1/CX_RDSSERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING¶

Required arguments:¶

`iv_dbsecuritygroupname` `TYPE /AWS1/RDSSTRING` `/AWS1/RDSSTRING`¶

The name of the DB security group to revoke ingress from.

Optional arguments:¶

`iv_cidrip` `TYPE /AWS1/RDSSTRING` `/AWS1/RDSSTRING`¶

The IP range to revoke access from. Must be a valid CIDR range. If CIDRIP is specified, EC2SecurityGroupName, EC2SecurityGroupId and EC2SecurityGroupOwnerId can't be provided.

`iv_ec2securitygroupname` `TYPE /AWS1/RDSSTRING` `/AWS1/RDSSTRING`¶

The name of the EC2 security group to revoke access from. For VPC DB security groups, EC2SecurityGroupId must be provided. Otherwise, EC2SecurityGroupOwnerId and either EC2SecurityGroupName or EC2SecurityGroupId must be provided.

`iv_ec2securitygroupid` `TYPE /AWS1/RDSSTRING` `/AWS1/RDSSTRING`¶

The id of the EC2 security group to revoke access from. For VPC DB security groups, EC2SecurityGroupId must be provided. Otherwise, EC2SecurityGroupOwnerId and either EC2SecurityGroupName or EC2SecurityGroupId must be provided.

`iv_ec2securitygroupownerid` `TYPE /AWS1/RDSSTRING` `/AWS1/RDSSTRING`¶

The Amazon Web Services account number of the owner of the EC2 security group specified in the EC2SecurityGroupName parameter. The Amazon Web Services access key ID isn't an acceptable value. For VPC DB security groups, EC2SecurityGroupId must be provided. Otherwise, EC2SecurityGroupOwnerId and either EC2SecurityGroupName or EC2SecurityGroupId must be provided.

RETURNING¶

`oo_output` `TYPE REF TO /aws1/cl_rdsrvkdbsecgroupingrs` `/AWS1/CL_RDSRVKDBSECGROUPINGRS`¶

Domain /AWS1/RT_ACCOUNT_ID

Primitive Type NUMC

Examples¶

Syntax Example¶

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->revokedbsecuritygroupingress(
  iv_cidrip = |string|
  iv_dbsecuritygroupname = |string|
  iv_ec2securitygroupid = |string|
  iv_ec2securitygroupname = |string|
  iv_ec2securitygroupownerid = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lo_dbsecuritygroup = lo_result->get_dbsecuritygroup( ).
  IF lo_dbsecuritygroup IS NOT INITIAL.
    lv_string = lo_dbsecuritygroup->get_ownerid( ).
    lv_string = lo_dbsecuritygroup->get_dbsecuritygroupname( ).
    lv_string = lo_dbsecuritygroup->get_dbsecuritygroupdesc( ).
    lv_string = lo_dbsecuritygroup->get_vpcid( ).
    LOOP AT lo_dbsecuritygroup->get_ec2securitygroups( ) into lo_row.
      lo_row_1 = lo_row.
      IF lo_row_1 IS NOT INITIAL.
        lv_string = lo_row_1->get_status( ).
        lv_string = lo_row_1->get_ec2securitygroupname( ).
        lv_string = lo_row_1->get_ec2securitygroupid( ).
        lv_string = lo_row_1->get_ec2securitygroupownerid( ).
      ENDIF.
    ENDLOOP.
    LOOP AT lo_dbsecuritygroup->get_ipranges( ) into lo_row_2.
      lo_row_3 = lo_row_2.
      IF lo_row_3 IS NOT INITIAL.
        lv_string = lo_row_3->get_status( ).
        lv_string = lo_row_3->get_cidrip( ).
      ENDIF.
    ENDLOOP.
    lv_string = lo_dbsecuritygroup->get_dbsecuritygrouparn( ).
  ENDIF.
ENDIF.

To revoke ingress for a DB security group¶

This example revokes ingress for the specified CIDR block associated with the specified DB security group.

DATA(lo_result) = lo_client->revokedbsecuritygroupingress(
  iv_cidrip = |203.0.113.5/32|
  iv_dbsecuritygroupname = |mydbsecuritygroup|
).

/AWS1/IF_RDS=>REVOKEDBSECURITYGROUPINGRESS()¶