Tools and APIs
Below we highlight the most relevant command-line tools and SOAP API calls used to manipulate security groups. Please refer to the appropriate sections of this guide for the specific details.
| Purpose | Command-line tool | SOAP API |
|---|---|---|
| List the rules belonging to specified groups |
ec2-describe-group
|
DescribeSecurityGroups |
| Create a new security group |
ec2-add-group
|
CreateSecurityGroup |
| Delete an existing security group |
ec2-delete-group
|
DeleteSecurityGroup |
| Add an access rule to an existing security group |
ec2-authorize
|
AuthorizeSecurityGroupIngress |
| Remove an access rule from an existing security group |
ec2-revoke
|
RevokeSecurityGroupIngress |