CreateSecurityGroup

The CreateSecurityGroup operation creates a new security group.

Every instance is launched in a security group. If none is specified as part of the launch request then instances are launched in the default security group. Instances within the same security group have unrestricted network access to one another. Instances will reject network access attempts from other instances in a different security group. As the owner of instances you may grant or revoke specific permissions using the AuthorizeSecurityGroupIngress and RevokeSecurityGroupIngress operations.

The following table describes the request parameters for CreateSecurityGroup. Parameter names are case sensitive.

Element NameDefinitionRequired?Type
groupName Name for the new security group. Yesxsd:string
groupDescription Description of the new security group. Yesxsd:string

The following table describes the default response tags included in CreateSecurityGroup responses.

Element NameDefinitionType
return true if call succeeded. xsd:boolean
<CreateSecurityGroup xmlns="http://ec2.amazonaws.com/doc/2007-03-01">
    <groupName>WebServers</groupName>
    <groupDescription>Web</groupDescription>
</CreateSecurityGroup>
<CreateSecurityGroupResponse xmlns="http://ec2.amazonaws.com/doc/2007-03-01">
  <return>true</return>
</CreateSecurityGroupResponse>