Description

This operation allows you to revoke an outbound security group rule. Two approaches are supported to revoke the outbound security group access rules. One approach is to revoke the authorization rules for other security groups that are allowed to access the security group through a specified port. This occurs by adopting the specified protocol within this region (Classic network) and VPC. The other approach is to revoke the IP address range that is allowed to access this security group through a specified port. This occurs by adopting a specified protocol.

Note: Only the rules authorized by calling the Authorization interface can be deleted (parameter values are the same as during authorization).

The security group rules are constructed by one of the two sets of optional parameters:

• DestGroupOwnerAccount, DestGroupId, IpProtocol, PortRange, NicType, Policy
• DestCidrIp, IpProtocol, PortRange, NicType, Policy

An error will be reported if a matching rule cannot be found.

Request parameters

Return parameters

All parameters are public return parameters. For details, refer to Public Return Parameters.

Error code

Examples

Request example

• Revoke access permissions to other security groups.

https://ecs.aliyuncs.com/?Action=RevokeSecurityGroupEgress
&SecurityGroupId=sg-94n63e80l
&IpProtocol=all 
&DestGroupId=sg-94oi1r1bp
&IpProtocol=tcp
&PortRange=1/65535
&Priority=1
&<Public Request Parameters>

• Revoke access permissions to a specified range of IP addresses.

https://ecs.aliyuncs.com/?Action=RevokeSecurityGroupEgress
&SecurityGroupId=sg-94n63e80l
&IpProtocol=all 
&DestCidrIp=10.0.0.0/8
&IpProtocol=tcp
&PortRange=1/65535
&Priority=1
&<Public Request Parameters>

Return example

XML format

<RevokeSecurityGroupEgressResponse>
     <RequestId>CEF72CEB-54B6-4AE8-B225-F876FF7BA984</RequestId>
</RevokeSecurityGroupEgressResponse>

JSON format

{
    "RequestId":"CEF72CEB-54B6-4AE8-B225-F876FF7BA984"
}