CreateSecurityGroup

The CreateSecurityGroup operation creates a new security group.

Every instance is launched in a security group. If no security group is specified during launch, the instances are launched in the default security group. Instances within the same security group have unrestricted network access to each other. Instances will reject network access attempts from other instances in a different security group. As the owner of instances you can grant or revoke specific permissions using the AuthorizeSecurityGroupIngress and RevokeSecurityGroupIngress operations.

The following table describes the request parameters for CreateSecurityGroup. Parameter names are case sensitive.

NameDescriptionRequired

groupName

Name of the new security group.

Type: xsd:string

Yes

groupDescription

Description of the new security group.

Type: xsd:string

Yes

The following table describes the default response tags included in CreateSecurityGroup responses.

NameDescription

return

true if call succeeded.

Type: xsd:boolean

<CreateSecurityGroup xmlns="http://ec2.amazonaws.com/doc/2008-02-01">
    <groupName>WebServers</groupName>
    <groupDescription>Web</groupDescription>
</CreateSecurityGroup>
<CreateSecurityGroupResponse xmlns="http://ec2.amazonaws.com/doc/2008-02-01">
  <return>true</return>
</CreateSecurityGroupResponse>