The user can enter the required information for the Security Group service through the Samsung Cloud Platform Console and create the service by selecting detailed options.

Create Security Group

You can create and use the Security Group service in the Samsung Cloud Platform Console.

To create a Security Group, follow these steps.

1. Click All Services > Networking > Security Group menu. It moves to the Service Home page of Security Group.

2. On the Service Home page, click the Create Security Group button. It moves to the Create Security Group page.

   • Enter Service Information area, please enter the necessary information.

     Division	Necessity	Detailed Description
     Security Group name	required	Name of the Security Group to be created It can use English letters, numbers, special characters(-) and can be entered up to a maximum of 255 characters Duplicated Security Group names can be used within the project
     Log storage option	Select	Security Group log storage option select Enabled: Store logs Disabled: Do not store logs Clicking Security Group Logging shortcut will move to the Security Group Logging list page

     Table. Security Group service information input items
   Reference

   To save Security Group logs, you must first create a bucket in Object Storage to save the logs, and then set the bucket as the log repository in Security Group Logging.

   • Log storage settings can be checked in Security Group Logging, and for more information, please refer to Security Group Logging.
   • If you set up a log storage, you will be charged for Object Storage fees for log storage.
   • Enter Additional Information Enter or select the required information in the area.

     Classification	Mandatory	Detailed Description
     Tag	Select	Add Tag Up to 50 can be added per resource Click the Add Tag button and enter or select Key, Value
     Description	Select	User Additional Description Up to 255 characters can be entered

     Table. Input items for adding Security Group information

3. Check the input information and click the Complete button.

   • Once creation is complete, check the created resource on the Security Group list page.

Check Security Group details

On the Security Group menu’s Security Group list page, you can check and modify the entire resource list and detailed information.

To check the Security Group details, follow the next procedure.

1. Click All services > Networking > Security Group menu. It moves to the Service Home page of Security Group.
2. On the Service Home page, click the Security Group menu. It moves to the Security Group list page.
3. Security Group list page, click the resource to check the detailed information. Move to the Security Group details page.
   • Security Group Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Operation History tabs.

Detailed Information

You can check the detailed information of the selected resource in the Security Group list and modify the information if necessary.

Rule

In the rules tab, you can check the Security Group rule list and add or delete rules.

Tag

On the Security Group List page, you can check the tag information of the selected resource, and add, change, or delete it.

Work History

Security Group list page where you can check the operation history of the selected resource.

Security Group resource management

You can manage resources such as Security Group log storage settings, rule additions, and more.

Using Log Saving

To save Security Group logs, follow these procedures.

1. Click All Services > Networking > Security Group menu. It moves to the Service Home page of Security Group.
2. On the Service Home page, click the Security Group menu. It moves to the Security Group list page.
3. Security Group list page, click on the resource (Security Group name) to save the log. Move to the Security Group details page.
4. Click the Edit icon of Log Saving. It moves to the Edit Log Saving popup window.
5. Modify log storage In the 로그 저장 여부 수정 popup window, select 사용 and click the 확인 button.

Setting to not use log saving

To stop saving Security Group logs, follow these steps.

1. 모든 서비스 > Networking > Security Group menu should be clicked. It moves to the Service Home page of Security Group.
2. On the Service Home page, click the Security Group menu. It moves to the Security Group list page.
3. On the Security Group list page, click the Security Group name that does not save logs. It moves to the Security Group details page.
4. Click the Edit icon of Log Saving. It moves to the Edit Log Saving popup window.
5. Modify log saving In the pop-up window, uncheck Use for the log storage and click the OK button.
6. Check the message in the Notification popup window and click the OK button.

Add a rule

To add a Security Group rule, follow these steps.

1. Click on the menu for all services > Networking > Security Group. It moves to the Service Home page of Security Group.

2. On the Service Home page, click the Security Group menu. It moves to the Security Group list page.

3. Security Group list page, click the resource (Security Group name) to add rules. Move to the Security Group details page.

4. Click the Rules tab on the Security Group Details page. It moves to the Rules tab page.

5. Click the Rule tab and click the Add Rule button. It moves to the Add Rule popup window.

   Classification	Necessity	Detailed Description
   Direction	Required	Application target criteria, traffic access direction setting Inbound rule: External → Server Outbound rule: Server → External
   Type	Required	Protocol type selection by protocol Detailed input items vary depending on the selected protocol type
   Protocol Number	Required	If you select Custom Protocol in the protocol, enter the protocol number 1 ~ 254 values can be entered
   Protocol	Required	Protocol Type TCP, UDP, ICMP, ALL Select the desired protocol from these values ALL means all ports for all protocols
   Port Range	Required	If TCP/UDP is selected in the protocol, set the allowed port Well-known ports such as SSH, HTTP, TELENT can be selected When entering directly, values from 1 ~ 65,535 can be entered, and port range can be specified using ‘start value-end value’
   Type	Required	If you select ICMP in the protocol, set the ICMP Type Types defined as ICMP Type, such as Echo, can be used by selecting them When entering directly, values from 0 ~ 255 can be entered
   Remote	Required	Rule Remote Type Setting CIDR: Set target address by directly entering IP Security Group: Set created Security Group as target
   Remote > Destination Address	Required	If you select CIDR for the Remote type, entering the destination address is required When selecting CIDR: Enter in CIDR (IP address/subnet mask) format You can enter up to 128 addresses at once using , and -. To use the entire IP range (ANY), enter ‘0.0.0.0/0’
   원격 > Security Group	필수	Remote type is Security Group is selected, Security Group selection is required
   Description	Optional	Additional description written by the user Up to 255 characters can be entered

   Fig. Security Group rule addition details

6. Check the rules to be added, then click the Confirm button.

Rule Bulk Creation

To add multiple Security Group rules at once, follow these steps.

1. Click All Services > Networking > Security Group menu. It moves to the Service Home page of Security Group.
2. On the Service Home page, click the Security Group menu. It moves to the Security Group list page.
3. Security Group list page, click the resource (Security Group name) to add a rule. Move to the Security Group details page.
4. Click the Rules tab on the Security Group Details page. It moves to the Rules tab page.
5. Click the 규칙 tab and click the 엑셀 다운로드 button. The 규칙 bulk input Excel file will be downloaded.
6. Enter the rule information into the bulk input Excel file and save it.
7. Click the Batch Rule Input button. The Batch Rule Input popup window appears.
8. Bulk Input Rules In the Bulk Input Rules popup window, click File Attachment and attach the written Excel file, then click File Upload.
   • You cannot upload if the attached Excel file format is different from the registration form or the file is encrypted.
   • The number of bulk registration rules that can be uploaded at once is up to 100. If the maximum registration rule is exceeded, it cannot be uploaded.
   • If the maximum number of rules that can be registered in Account is exceeded, the file cannot be uploaded.
9. In the Check Rules popup window, check the details and click the Confirm button.

Deleting Rules

To delete a Security Group rule, follow these procedures.

1. Click on the menu for all services > Networking > Security Group. It moves to the Service Home page of Security Group.
2. On the Service Home page, click the Security Group menu. It moves to the Security Group list page.
3. Security Group list page, click the resource (Security Group name) to add rules. Move to the Security Group details page.
4. Click the Rule tab on the Security Group Details page. It moves to the Rule tab page.
5. Click the Delete button of the rule to be deleted in the Rules tab.

Security Group cancellation

You can delete unused Security Groups.

To cancel the Security Group, follow the procedure below.

1. Click All services > Networking > Security Group menu. It moves to the Service Home page of Security Group.
2. On the Service Home page, click the Security Group menu. It moves to the Security Group list page.
3. On the Security Group list page, select the resource (Security Group name) to be terminated and click the Service Termination button.
4. Once the cancellation is complete, please check if the resource has been cancelled on the Security Group list page.