Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How do you change the name and description of a security group in AWS EC2?

My security group is named quick-start-1 (the default) and I want to change it to "HTTP, HTTPS and Limited SSH".

share|improve this question
Can't even change the description! What stupidity is this, Amazon? – ADTC Jan 3 at 2:25
up vote 13 down vote accepted

It's not possible to rename a security group, by GUI or by API.

It's also not possible to change the security group that is assigned to an EC2 instance. EDIT: You can now dynamically assign security groups assigned to VPC EC2 instances, but you still can't do this for EC2 classic instances.

If you must change the security group for an EC2 classic instance, then you need to:

  1. Create an AMI from your instance, then
  2. Launch a new copy of your instance from the AMI created in step #1, selecting the new security group at launch time.

For VPC instances, see the answer below by @FlavioMuratore

share|improve this answer
Not entirely correct. If you use a VPC (and why wouldn't you) you can change assigned SGs dynamically. – EEAA Jan 7 '13 at 4:00
wonderful ridiculousness... – Jacob Thomason Mar 16 '14 at 10:04
You can choose to copy the security group. Then you are given the possibility to give the new security group a new name and a new description. – fredrik Jul 2 '14 at 7:14
One reason to not use a VPC is because you can't without starting up a new AWS account. :( – Dan Pritts Jun 22 '15 at 15:11
All AWS accounts can use VPC. – Matt Houser Jun 22 '15 at 15:37

You cannot rename a security group but you can copy it into a new one. On the AWS console go to EC2 -> Security Groups -> Select the SG -> Click actions -> Copy to new. Give it a name and description that suits your taste. After that you can associate this security group with your instances (making it redundant with the old one). Finally, dissociate the old security group from your instances (rules remains the same since the new SG is a copy) and delete the SG.

It is a little bit of work, but it does get the job done with no downtime.

share|improve this answer
...only works with VPC instances, "classic" instances can't do this. – Dan Pritts Jun 22 '15 at 15:12
This should be the accepted answer, not sure why anyone uses EC2 classic these days anyhow – Paul Grimshaw Mar 31 at 9:56

You're not the first to want this, and you're not the first to be disappointed.

Also, you cant change security group memberships for an instance once launched. :-(

I'm 99% sure this cant be done via the web GUI. Maybe via API shenanigans, but if so i've never seen it. I've wanted it myself often enough.

share|improve this answer
As mentioned above, if in a VPC, you can change security group assignments as needed at any time. It's only non-VPC instances that have this restriction. – EEAA Jan 7 '13 at 4:02
Yes, sorry I should have made that point. – Sirex Jan 7 '13 at 18:42

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.