This topic describes how to configure a security group for an ApsaraDB RDS for MySQL instance. The RDS security group can be associated with an Elastic Compute Service (ECS) security group to allow all ECS instances in the ECS security group to access the RDS instance.
Scenarios
You create an ApsaraDB RDS for SQL Server instance but cannot connect to the RDS instance. In this case, you must configure a security group or an IP address whitelist for the RDS instance. For more information, see Configure an IP address whitelist for an ApsaraDB RDS for SQL Server instance.
For more information about security groups, see Create a security group.
You can configure both security groups and IP address whitelists for your RDS instance. For more information, see Configure an IP address whitelist for an ApsaraDB RDS for SQL Server instance. All the IP addresses in the configured IP address whitelists and all the Elastic Compute Service (ECS) instances in the configured security groups are granted access to your RDS instance.
Usage notes
You can configure both IP address whitelists and security groups for an RDS instance. All the IP addresses in the configured IP address whitelists and all the ECS instances in the configured security groups are granted access to your RDS instance.
A maximum of 10 security groups can be configured for each RDS instance.
After the ECS instances in a configured security group are updated, the updates immediately take effect.
The security groups that you configure for an RDS instance must have the same network type as the RDS instance. This means that the network types of the RDS instance and the security groups that you want to configure must both be virtual private cloud (VPC) or classic network.
After you change the network type of your RDS instance, the security group that you have added becomes invalid. You must add the security group of the required network type again.
Procedure
- Go to the Instances page. In the top navigation bar, select the region in which the RDS instance resides. Then, find the RDS instance and click the ID of the instance.
- In the left-side navigation pane, click Whitelist and SecGroup. On the page that appears, click the Security Group tab.
- Click Add Security Group. Note Security groups followed by a VPC tag contain ECS instances that reside in virtual private clouds (VPCs).
- Select the security group that you want to add, and then click OK.
What to do next
Related operations
| Operation | Description |
| DescribeSecurityGroupConfiguration | Queries details about the ECS security groups that are associated with an instance. |
| ModifySecurityGroupConfiguration | Modifies details about the ECS security groups that are associated with an instance. |