AWS SDK Version 3 for .NET
API Reference

AWS services or capabilities described in AWS Documentation may vary by region/location. Click Getting Started with Amazon AWS to see specific differences applicable to the China (Beijing) Region.

Creates a security group.

A security group acts as a virtual firewall for your instance to control inbound and outbound traffic. For more information, see Amazon EC2 security groups in the Amazon Elastic Compute Cloud User Guide and Security groups for your VPC in the Amazon Virtual Private Cloud User Guide.

When you create a security group, you specify a friendly name of your choice. You can't have two security groups for the same VPC with the same name.

You have a default security group for use in your VPC. If you don't specify a security group when you launch an instance, the instance is launched into the appropriate default security group. A default security group includes a default rule that grants instances unrestricted network access to each other.

You can add or remove rules from your security groups using AuthorizeSecurityGroupIngress, AuthorizeSecurityGroupEgress, RevokeSecurityGroupIngress, and RevokeSecurityGroupEgress.

For more information about VPC security group limits, see Amazon VPC Limits.


For .NET Core this operation is only available in asynchronous form. Please refer to CreateSecurityGroupAsync.

Namespace: Amazon.EC2
Assembly: AWSSDK.EC2.dll
Version: 3.x.y.z


public virtual CreateSecurityGroupResponse CreateSecurityGroup(
         CreateSecurityGroupRequest request


Type: Amazon.EC2.Model.CreateSecurityGroupRequest

Container for the necessary parameters to execute the CreateSecurityGroup service method.

Return Value

The response from the CreateSecurityGroup service method, as returned by EC2.


This example creates a security group for the specified VPC.

To create a security group for a VPC

var client = new AmazonEC2Client();
var response = client.CreateSecurityGroup(new CreateSecurityGroupRequest 
    Description = "My security group",
    GroupName = "my-security-group",
    VpcId = "vpc-1a2b3c4d"

string groupId = response.GroupId;


Version Information

.NET Framework:
Supported in: 4.5 and newer, 3.5

See Also