Search code examples
amazon-web-servicesamazon-vpcaws-security-group

How does the number of rules in AWS VPC security groups is calculated?


In my control panel I see a security group which has a count of 250 rules, but I only see two rules in the list:

security group UI screenshot

What do I miss?


Solution

  • Ok, so it's not a glitch. After talking to AWS support, turns out that the number of permission entries in this case is calculated from (hold tight) sum of maximum possible entries of each Source (see the sources column on screenshot). In this case, sources were Managed Prefix Lists, and the maximum number of entries was 150 for one of them and 100 for another - and this how the limit got hit.

    Interestingly, the actual number of records didn't matter - only the limit (see screenshot with Manage Prefix List screen). I've passed it on to devops, and they dealt with it - sorry for no solution, but maybe it'd help you to locate the root of your issue :)

    enter image description here