Queries ECS security groups to which an ApsaraDB for RDS instance is added.

After an RDS instance is added to an ECS security group, all ECS instances in the security group can access the RDS instance. For more information, see Configure a whitelist for an RDS instance.


OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
Action String Yes DescribeSecurityGroupConfiguration

The operation that you want to perform. Set the value to DescribeSecurityGroupConfiguration.

DBInstanceId String Yes rm-uf6wjk5xxxxxx

The ID of the instance.

Response parameters

Parameter Type Example Description
DBInstanceName String rm-uf6wjk5xxxxxx

The ID of the instance.

Items Array

An array that consists of ECS security groups.

NetworkType String VPC

The network type of the ECS security group. Valid values:

  • Classic
  • VPC
RegionId String cn-hangzhou

The ID of the region.

SecurityGroupId String sg-xxxxxxx

The ID of the ECS security group.

RequestId String 87BDAE8C-ACB0-4A26-BBCC-7D1DD31D630D

The ID of the request.


Sample requests

http(s)://rds.aliyuncs.com/? Action=DescribeSecurityGroupConfiguration
&<Common request parameters>

Sample success responses

XML format


JSON format


Error codes

For a list of error codes, visit the API Error Center.