Working with DB Security Groups

A DB security group controls network access to a DB instance that is not inside a VPC. By default, network access is disabled for a new DB security group; you must specifically authorize access to an IP range for a new DB security group after you create it. For more information on VPC security groups, which are used to control access to DB instances inside a VPC, see VPC Security Groups.