aws rds authorize-db-security-group-ingress

Enables ingress to a DBSecurityGroup using one of two forms of authorization. AWS CLI reference

1 example 5 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

To associate an AWS Identity and Access Management (IAM) role with a DB instance

The following authorize-db-security-group-ingress example configures the default security group with an ingress rule for the CIDR IP range 192.0.2.0/24.

aws rds authorize-db-security-group-ingress --db-security-group-name default --cidrip 192.0.2.0/24Identify

--db-security-group-nameThe name of the DB security group to add authorization to.

--cidripThe IP range to authorize.

Its output

{
    "DBSecurityGroup": {
        "OwnerId": "123456789012",
        "DBSecurityGroupName": "default",
        "DBSecurityGroupDescription": "default",
        "EC2SecurityGroups": [],
        "IPRanges": [
            {
                "Status": "authorizing",
                "CIDRIP": "192.0.2.0/24"
            }
        ],
        "DBSecurityGroupArn": "arn:aws:rds:us-west-2:123456789012:secgrp:default"
    }
}

For more information, see Authorizing Network Access to a DB Security Group from an IP Range in the Amazon RDS User Guide.

Options

5 in the AWS CLI reference

--cidripThe IP range to authorize.

--db-security-group-nameThe name of the DB security group to add authorization to.

--ec2-security-group-idId of the EC2 security group to authorize.

--ec2-security-group-nameName of the EC2 security group to authorize.

--ec2-security-group-owner-idAmazon Web Services account number of the owner of the EC2 security group specified in the EC2SecurityGroupName parameter.