RevokeSecurityGroupIngress

GET /?Action=RevokeSecurityGroupIngress
Description

Removes one or more ingress rules from a security group. The values specified in the revoke request must exactly match the value of the existing rule for the rule to be removed.
In case of TCP and UDP protocols, you have to indicate the destination port or range of ports. In case of ICMP protocol, you have to specify the ICMP type and code.
Rules (IP permissions) consist of the protocol, the CIDR range and the source security group.

Body parameter

Required: false
Name: RevokeSecurityGroupIngressRequest

Name Description Required Schema Default Example

CidrIp

The CIDR IP address range.

false

string

FromPort

The beginning of the port range for the TCP and UDP protocols, or an ICMP type number.

false

integer

GroupId

The ID of the security group.

false

string

GroupName

The name of the security group, if you are in the public Cloud.

false

string

IpPermissions.N

A set of IP permissions.

false

IpPermission

IpProtocol

The IP protocol name (tcp, udp, icmp) or protocol number. By default, -1, which means all protocols.

false

string

SourceSecurityGroupName

The name of the source security group (cannot be specified alongside the CIDR IP address range, the start of the port range, the IP protocol, and the end of the port range).

false

string

SourceSecurityGroupOwnerId

The account ID of the owner of the source security group.

false

string

ToPort

The end of the port range for the TCP and UDP protocols, or an ICMP type number.

false

integer
Responses
HTTP Code 200
HTTP Code Description Schema

200

RevokeSecurityGroupIngressResult

Response 200

Response 200

Name Description Required Schema Default Example

requestId

The ID of the request.

false

string

return

If true, the request succeeds. Otherwise, an error is returned.

false

boolean