Below we highlight the most relevant command-line tools and SOAP API calls used to manipulate security groups. Please refer to the appropriate sections of this guide for the specific details.
| Purpose | Command-line tool | SOAP API |
|---|---|---|
| List the rules belonging to specified groups | ec2-describe-group | DescribeSecurityGroups |
| Create a new security group | ec2-add-group | CreateSecurityGroup |
| Delete an existing security group | ec2-delete-group | DeleteSecurityGroup |
| Add an access rule to an existing security group | ec2-authorize | AuthorizeSecurityGroupIngress |
| Remove an access rule from an existing security group | ec2-revoke | RevokeSecurityGroupIngress |