Security Groups

  • Private IPv4 addresses are not reachable over the Internet, and can be used for communication between the instances in your VPC.

  • When you launch an instance into a VPC, a primary private IP address from the IPv4 address range of the subnet is assigned to the default network interface (eth0) of the instance.

  • CAN'T USE THE INSTANCE ID IN A SECURITY GROUP.

  • SOURCE IN THE INBOUND RULE OF A SECURITY GROUP CAN BE:

    • SINGLE IP ADDRESS

    • RANGE OF ADDRESSES

    • ANOTHER VPC SECURITY GROUP

Last updated