Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Terraform in Yandex Cloud
  • Getting started
  • Solution library
    • Overview
    • Release notes
          • vpc_address
          • vpc_gateway
          • vpc_network
          • vpc_private_endpoint
          • vpc_route_table
          • vpc_security_group
          • vpc_security_group_rule
          • vpc_subnet

In this article:

  • Example Usage
  • Schema
  • Optional
  • Read-Only
  • Nested Schema for egress
  • Nested Schema for ingress
  1. Terraform reference
  2. Resources
  3. Virtual Private Cloud (VPC)
  4. Data Sources
  5. vpc_security_group

yandex_vpc_security_group (Data Source)

Written by
Yandex Cloud
Updated at October 9, 2025
  • Example Usage
  • Schema
    • Optional
    • Read-Only
    • Nested Schema for egress
    • Nested Schema for ingress

Get information about a Yandex VPC Security Group Rule. For more information, see the official documentation.

This data source used to define Security Group Rule that can be used by other resources.

Example UsageExample Usage

//
// Get information about existing VPC Security Group.
//
data "yandex_vpc_security_group" "group1" {
  security_group_id = "my-id"
}

data "yandex_vpc_security_group" "group1" {
  name = "my-group1"
}

SchemaSchema

OptionalOptional

  • folder_id (String) The folder identifier that resource belongs to. If it is not provided, the default provider folder-id is used.
  • name (String) The resource name.
  • security_group_id (String) ID of Security Group that owns the rule.

Read-OnlyRead-Only

  • created_at (String) The creation timestamp of the resource.
  • description (String) The resource description.
  • egress (Set of Object) A list of egress rules. (see below for nested schema)
  • id (String) The ID of this resource.
  • ingress (Set of Object) A list of ingress rules. (see below for nested schema)
  • labels (Map of String) A set of key/value label pairs which assigned to resource.
  • network_id (String) ID of the network this security group belongs to.
  • status (String) Status of this security group.

Nested Schema for Nested Schema for egress

Read-Only:

  • description (String) Description of the rule.

  • from_port (Number) Minimum port number.

  • id (String) The resource identifier.

  • labels (Map of String) Labels to assign to this rule.

  • port (Number) Port number (if applied to a single port).

  • predefined_target (String) Special-purpose targets. self_security_group refers to this particular security group. loadbalancer_healthchecks represents loadbalancer health check nodes.

  • protocol (String) One of ANY, TCP, UDP, ICMP, IPV6_ICMP.

  • security_group_id (String) Target security group ID for this rule.

  • to_port (Number) Maximum port number.

  • v4_cidr_blocks (List of String) The blocks of IPv4 addresses for this rule.

  • v6_cidr_blocks (List of String) The blocks of IPv6 addresses for this rule. v6_cidr_blocks argument is currently not supported. It will be available in the future.

Nested Schema for Nested Schema for ingress

Read-Only:

  • description (String) Description of the rule.

  • from_port (Number) Minimum port number.

  • id (String) The resource identifier.

  • labels (Map of String) Labels to assign to this rule.

  • port (Number) Port number (if applied to a single port).

  • predefined_target (String) Special-purpose targets. self_security_group refers to this particular security group. loadbalancer_healthchecks represents loadbalancer health check nodes.

  • protocol (String) One of ANY, TCP, UDP, ICMP, IPV6_ICMP.

  • security_group_id (String) Target security group ID for this rule.

  • to_port (Number) Maximum port number.

  • v4_cidr_blocks (List of String) The blocks of IPv4 addresses for this rule.

  • v6_cidr_blocks (List of String) The blocks of IPv6 addresses for this rule. v6_cidr_blocks argument is currently not supported. It will be available in the future.

Was the article helpful?

Previous
vpc_route_table
Next
vpc_security_group_rule
© 2025 Direct Cursus Technology L.L.C.