
AWS Snowball Edge security groups control inbound and outbound traffic for EC2 instances using AWS CLI commands to create, manage, and enforce network access policies on edge devices.


<div><p>This article explains how to use and manage security groups on AWS Snowball Edge devices to control EC2 instance traffic.</p><ul><li>Security groups act as virtual firewalls for EC2 instances on Snowball Edge devices</li><li>Snowball Edge limited to 50 security groups; each instance has one group with max 120 rules</li><li>Security groups only support allow rules, not deny statements</li><li>AWS OpsHub GUI can only view security group names; all other management requires AWS CLI</li><li>Security groups only supported with Virtual Network Interfaces (VNI), not Direct Network Interfaces</li><li>Common CLI commands: create, describe, authorize ingress/egress, revoke, modify, delete</li><li>Default security group allows all inbound and outbound traffic on Snowball Edge</li><li>Example walkthrough demonstrates restricting SSH access to single management PC IP address</li></ul><p>The article provides practical AWS CLI commands and examples for managing security groups on Snowball Edge devices to restrict EC2 instance access.</p></div>


Related articles