How-to guides
Users can create the service by entering the required information for the Security Group service and selecting detailed options through the Samsung Cloud Platform Console.
Create Security Group
You can create and use the Security Group service in the Samsung Cloud Platform Console.
To create a Security Group, follow these steps.
- Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
- Click the Create Security Group button on the Service Home page. You will be taken to the Create Security Group page.
- Enter the required information in the Service Information Input area.
Category Required statusDetailed description Security Group name Required Security Group name to create - English letters, numbers, and special characters (
-) can be used, and up to 255 characters can be entered
- Duplicate Security Group names are allowed within the project
Whether to save logs Select Select whether to store Security Group logs - Enabled: Store logs
- Disabled: Do not store logs
- Click Security Group Logging List Shortcut to go to the Security Group Logging list page
Table. Security Group service information input items - English letters, numbers, and special characters (
- Enter the required information in the Service Information Input area.
To store Security Group logs, first create a bucket in Object Storage for the logs, and configure that bucket as the log repository in Security Group Logging.
- The log storage settings can be verified in Security Group Logging, and for more details, refer to Security Group Logging.
- If you configure a log repository, Object Storage charges for log storage will be applied.
* In the **Additional Information Input** area, enter or select the required information.
Category
Required
Detailed description
tag
Select
Add Tag- Up to 50 can be added per resource
- After clicking the Add Tag button, enter or select Key and Value values
Explanation
Select
User additional description- Up to 255 characters allowed
Table. Security Group additional information input fields
- Check the input information and click the Create button.
- When creation is complete, check the created resources on the Security Group List page.
Check Security Group detailed information
On the Security Group menu’s Security Group List page, you can view and edit the full resource list and detailed information.
To view detailed information about a Security Group, follow these steps.
- Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
- On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
- On the Security Group List page, click the resource for which you want to view detailed information. You will be taken to the Security Group Details page.
- Security Group Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Activity History tabs.
| Category | Detailed description |
|---|---|
| Service status | Security Group status
|
| Service termination | Cancel service button |
Detailed Information
Security Group List lets you view detailed information of the selected resource and edit the information when needed.
| Category | Detailed description |
|---|---|
| service | Service name |
| Resource Type | Resource Type |
| SRN | Unique resource ID in Samsung Cloud Platform |
| Resource Name | Resource Name |
| Resource ID | Unique resource ID in the service |
| Constructor | User who created the service |
| Creation Date/Time | Service creation date and time |
| Editor | User who edited the service information |
| Modification date | Date and time the service information was modified |
| Security Group name | Resource Name |
| Security Group ID | Unique resource ID in the service |
| Number of Security Group rules | The rule quota and the number of rules currently in use for this Security Group |
| Security Group rule count/Account | Security Group rule quota for the account and the total number of rules in use across all Security Groups in the account |
| description | Additional description written by the user
|
| Whether to save logs | Security Group log storage option
|
| Applicable Service | The service type, service name, and status of the service to which this Security Group is applied |
Rule
Security Group list page lets you view the rule list of the selected resource and add or delete rules.
| Category | Detailed description |
|---|---|
| Excel download | Bulk rule entry Excel file download button |
| More | Additional Function Button
|
| Advanced Search | Rule Detail Search Button |
| Add rule | Add Rule button |
| direction | Traffic direction for servers with Security Group applied
|
| Rule ID | Unique ID value for the rule |
| Target address | Target address for communicating with a server that has a Security Group applied |
| Remote Security Group name | The Security Group resource name displayed when the target is set to a Security Group |
| Remote Security Group ID | Security Group ID displayed when the target is set to a Security Group |
| Service | Protocol and Port |
| Explanation | Additional description written by the user |
| Delete | Delete rule |
tag
Security Group List page lets you view, add, modify, or delete tag information for the selected resource.
| Category | Detailed description |
|---|---|
| Tag list | Tag list
|
Job History
You can view the operation history of the selected resource on the Security Group List page.
| Category | Detailed description |
|---|---|
| Task History List | Resource Change History
|
Managing Security Group Resources
You can manage resources such as log storage settings and rule additions for a Security Group.
Using Log Storage
To store Security Group logs, first create a bucket in Object Storage for the logs, and then configure that bucket in the log repository of Security Group Logging.
- The log storage settings can be verified in Security Group Logging, and for more details, refer to Security Group Logging.
- If you configure a log repository, Object Storage charges will be applied for log storage.
To save Security Group logs, follow the steps below.
- Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
- On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
- On the Security Group List page, click the resource (Security Group name) for which you want to store logs. You will be taken to the Security Group Details page.
- Click the Edit icon of Log Save Status. You will be taken to the Log Save Status Edit popup window.
- Modify Log Saving Option In the popup window, select Use for the log repository, and click the Confirm button.
Disable log storage
To stop storing Security Group logs, follow these steps.
- Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
- On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
- On the Security Group List page, click the resource (Security Group name) that you do not want to log. You will be taken to the Security Group Details page.
- Click the Edit icon of Log Save Option. It navigates to the Log Save Option Edit popup.
- Modify Log Saving Option In the popup window, deselect Use for the log repository, and click the Confirm button.
- Notification Check the message in the popup window and click the OK button.
Add rule
To add a Security Group rule, follow the steps below.
Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
Security Group List page, click the resource (Security Group name) to which you want to add a rule. Navigate to the Security Group Details page.
On the Security Group Details page, click the Rules tab. You will be taken to the Rules tab page.
on the Rules tab, click the Add Rule button. You will be taken to the Add Rule popup.
Category RequiredDetailed description Target input method Required Configure rule remote type - CIDR: Set target address by directly entering IP
- Security Group: Set to target the created Security Group
Remote > Target address Required If CIDR is selected, you must enter the target IP address - Enter in CIDR (IP address/subnet mask) format
- using
,and-, you can input multiple addresses at once, up to 100.
- Enter ‘0.0.0.0/0’ to use the entire IP range (ANY).
- using
Remote > Security Group Required When Security Group is selected, a Security Group selection is required. type Required Select protocol type to apply the rule - Select destination port/Type: Select protocol type
- Internet Protocol: Enter protocol numbers, up to 100 can be entered
- All: Select the entire range for destination port/Type and protocol, meaning all ports for all protocols
Type > Protocol Required Select detailed protocol for the type - Select the desired protocol among TCP, UDP, and ICMP; input fields vary depending on the selected protocol
- When ICMP is selected in the protocol, you can set the ICMP Type
- Select a commonly used Type, such as Echo, from the values defined for ICMP Type
- Click the Add button to add an input value
- When TCP/UDP is selected in the protocol, you can choose allowed ports such as SSH, HTTP, etc.
- When entering manually, you can input values from 1 to 65,535, and you can enter up to 100 entries at once using commas (,) or ranges (-)
- Click the Add button to add an input value
- When Internet Protocol is selected in the type
1 ~ 254Enter a protocol number within 1 to 254
direction Required Target application criteria, traffic direction configuration - Inbound rule: External → Server
- Outbound rule: Server → External
Explanation Select Additional description provided by the user Table. Detailed items for adding Security Group rulesAfter reviewing the rules to be added, click the Confirm button.
Batch Create Rules
To add multiple Security Group rules at once, follow these steps.
- Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
- From the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
- Security Group List page, click the resource (Security Group name) to which you want to add a rule. Security Group Details page will be displayed.
- On the Security Group Details page, click the Rules tab. You will be taken to the Rules tab page.
- Click the Excel Download button on the Rules tab. The bulk rule entry Excel file will be downloaded.
- Enter the rule information into the batch rule entry Excel file, then save it.
- More > Bulk Rule Input Click the button. Bulk Rule Input popup window opens.
- Batch Rule Input In the popup window, click Attach File, attach the Excel file you prepared, and click Upload File.
- You cannot upload the attached Excel file if its format differs from the registration form or if the file is encrypted.
- You can upload up to 100 batch registration rules at a time. If you exceed the maximum number of registration rules, the upload will not be allowed.
- If you exceed the maximum number of rules that can be registered in the Account, you cannot upload the file.
- Rule Confirmation Check the details in the popup window and click the Confirm button.
Delete rule
To delete a Security Group rule, follow these steps.
- Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
- On the Service Home page, click the Security Group menu. You will be taken to the Security Group list page.
- Security Group List page, click the resource (Security Group name) for which you want to add a rule. Security Group Details page will be displayed.
- On the Security Group Details page, click the Rules tab. You will be taken to the Rules tab page.
- In the Rules tab, click the Delete button for the rule you want to delete.
Terminate Security Group
You can delete unused Security Groups.
To delete a Security Group, follow these steps.
- Click the All Services > Networking > Security Group menu. Navigate to the Service Home page of the Security Group.
- Click the Security Group menu on the Service Home page. You will be taken to the Security Group List page.
- On the Security Group List page, select the resource (Security Group name) to terminate, and click the Terminate Service button.
- After termination is complete, check on the Security Group list page whether the resource has been deleted.