After an Amazon VPC instance is launched, can I change the VPC security groups it belongs to?

A.
Only if the tag “VPC_Change_Group” is true

B.
Yes. You can.

C.
No. You cannot.

D.
Only if the tag “VPC Change Group” is true

Leave a Reply 12

Security groups are associated with network interfaces. After you launch an instance, you can change the security groups associated with the instance, which changes the security groups associated with the primary network interface (eth0)

Chef

vladam

B is the right answer.

See http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html

After you launch an instance in a VPC, you can change its security groups. Security groups are associated with network interfaces. Changing an instance’s security groups changes the security groups associated with the primary network interface (eth0).

Note: After you launch an instance in EC2-Classic, you can’t change its security groups.

seenagape

I have the same idea. B

Mahendra Rathod

C No. You cannot.

.Practically checked . create VPC and try to delete default sg of that VPC.

Below is the error :-

We could not delete the following security group (sg-4f55bd30)
the specified group: “sg-4f55bd30” name: “default” cannot be deleted by a user (Service: AmazonEC2; Status Code: 400; Error Code: CannotDelete; Request ID: bfc2dd66-9325-4ebb-b265-46a971eb8532)

John Doe

Lol wut? Are you reading the questions? It doesn’t ask if you can delete default SG as it obviously is not possible. Each VPC must have at least 1 SG, ACL and route table.

B is the right answer, once VPC is launched you CAN modify the SGs. You can create new ones, edit inbout and outbound rules which takes effect immediately.