AWS Code Sample

The AWS Documentation website is getting a new look!
Try it now and let us know what you think. Switch to the new look >>

You can return to the original look by selecting English in the language selector above.


Creates an EC2 security group.

/* Copyright 2010-2019, Inc. or its affiliates. All Rights Reserved. This file is licensed under the Apache License, Version 2.0 (the "License"). You may not use this file except in compliance with the License. A copy of the License is located at This file is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ package main import ( "flag" "fmt" "os" "" "" "" "" ) // Creates a new security group with the given name and description for // open port 80 and 22 access. Associating the security group with the // first VPC in the account if a VPC ID is not provided. // // Usage: // go run ec2_describe_security_groups.go -n name -d description -vpc vpcID func main() { var name, desc, vpcID string flag.StringVar(&name, "n", "", "Group Name") flag.StringVar(&desc, "d", "", "Group Description") flag.StringVar(&vpcID, "vpc", "", "(Optional) VPC ID to associate security group with") flag.Parse() if len(name) == 0 || len(desc) == 0 { flag.PrintDefaults() exitErrorf("Group name and description require") } // Initialize a session in us-west-2 that the SDK will use to load // credentials from the shared credentials file ~/.aws/credentials. sess, err := session.NewSession(&aws.Config{ Region: aws.String("us-west-2")}, ) // Create an EC2 service client. svc := ec2.New(sess) // If the VPC ID wasn't provided in the CLI retrieve the first in the account. if len(vpcID) == 0 { // Get a list of VPCs so we can associate the group with the first VPC. result, err := svc.DescribeVpcs(nil) if err != nil { exitErrorf("Unable to describe VPCs, %v", err) } if len(result.Vpcs) == 0 { exitErrorf("No VPCs found to associate security group with.") } vpcID = aws.StringValue(result.Vpcs[0].VpcId) } // Create the security group with the VPC, name and description. createRes, err := svc.CreateSecurityGroup(&ec2.CreateSecurityGroupInput{ GroupName: aws.String(name), Description: aws.String(desc), VpcId: aws.String(vpcID), }) if err != nil { if aerr, ok := err.(awserr.Error); ok { switch aerr.Code() { case "InvalidVpcID.NotFound": exitErrorf("Unable to find VPC with ID %q.", vpcID) case "InvalidGroup.Duplicate": exitErrorf("Security group %q already exists.", name) } } exitErrorf("Unable to create security group %q, %v", name, err) } fmt.Printf("Created security group %s with VPC %s.\n", aws.StringValue(createRes.GroupId), vpcID) // Add permissions to the security group _, err = svc.AuthorizeSecurityGroupIngress(&ec2.AuthorizeSecurityGroupIngressInput{ GroupName: aws.String(name), IpPermissions: []*ec2.IpPermission{ // Can use setters to simplify seting multiple values without the // needing to use aws.String or associated helper utilities. (&ec2.IpPermission{}). SetIpProtocol("tcp"). SetFromPort(80). SetToPort(80). SetIpRanges([]*ec2.IpRange{ {CidrIp: aws.String("")}, }), (&ec2.IpPermission{}). SetIpProtocol("tcp"). SetFromPort(22). SetToPort(22). SetIpRanges([]*ec2.IpRange{ (&ec2.IpRange{}). SetCidrIp(""), }), }, }) if err != nil { exitErrorf("Unable to set security group %q ingress, %v", name, err) } fmt.Println("Successfully set security group ingress") } func exitErrorf(msg string, args ...interface{}) { fmt.Fprintf(os.Stderr, msg+"\n", args...) os.Exit(1) }

Sample Details

Service: ec2

Last tested: 2018-03-16

Author: Doug-AWS

Type: full-example

On this page: