AmazonEC2Client.AuthorizeSecurityGroupEgress Method (AuthorizeSecurityGroupEgressRequest)

[VPC only] Adds the specified outbound (egress) rules to a security group for use with a VPC.

An outbound rule permits instances to send traffic to the specified IPv4 or IPv6 CIDR address ranges, or to the instances that are associated with the specified source security groups. When specifying an outbound rule for your security group in a VPC, the IpPermissions must include a destination for the traffic.

You specify a protocol for each rule (for example, TCP). For the TCP and UDP protocols, you must also specify the destination port or port range. For the ICMP protocol, you must also specify the ICMP type and code. You can use -1 for the type or code to mean all types or all codes.

Rule changes are propagated to affected instances as quickly as possible. However, a small delay might occur.

For information about VPC security group quotas, see Amazon VPC quotas.

Note:

For .NET Core this operation is only available in asynchronous form. Please refer to AuthorizeSecurityGroupEgressAsync.

Namespace: Amazon.EC2
Assembly: AWSSDK.EC2.dll
Version: 3.x.y.z

Syntax

public virtual AuthorizeSecurityGroupEgressResponse AuthorizeSecurityGroupEgress(
         AuthorizeSecurityGroupEgressRequest request
)

Parameters

request: Type: Amazon.EC2.Model.AuthorizeSecurityGroupEgressRequest

Container for the necessary parameters to execute the AuthorizeSecurityGroupEgress service method.

Return Value

Type: AuthorizeSecurityGroupEgressResponse

The response from the AuthorizeSecurityGroupEgress service method, as returned by EC2.

Examples

This example adds a rule that grants access to the specified address ranges on TCP port 80.

To add a rule that allows outbound traffic to a specific address range


var client = new AmazonEC2Client();
var response = client.AuthorizeSecurityGroupEgress(new AuthorizeSecurityGroupEgressRequest 
{
    GroupId = "sg-1a2b3c4d",
    IpPermissions = new List<IpPermission> {
        new IpPermission {
            FromPort = 80,
            IpProtocol = "tcp",
            ToPort = 80
        }
    }
});

This example adds a rule that grants access to the specified security group on TCP port 80.

To add a rule that allows outbound traffic to a specific security group


var client = new AmazonEC2Client();
var response = client.AuthorizeSecurityGroupEgress(new AuthorizeSecurityGroupEgressRequest 
{
    GroupId = "sg-1a2b3c4d",
    IpPermissions = new List<IpPermission> {
        new IpPermission {
            FromPort = 80,
            IpProtocol = "tcp",
            ToPort = 80,
            UserIdGroupPairs = new List<UserIdGroupPair> {
                new UserIdGroupPair { GroupId = "sg-4b51a32f" }
            }
        }
    }
});

Version Information

.NET Framework:
Supported in: 4.5, 4.0, 3.5

AmazonEC2Client.AuthorizeSecurityGroupEgress (AuthorizeSecurityGroupEgressRequest)

Method