RDS / Client / describe_db_security_groups

describe_db_security_groups#

RDS.Client.describe_db_security_groups(**kwargs)#

Returns a list of DBSecurityGroup descriptions. If a DBSecurityGroupName is specified, the list will contain only the descriptions of the specified DB security group.

Note

EC2-Classic was retired on August 15, 2022. If you haven’t migrated from EC2-Classic to a VPC, we recommend that you migrate as soon as possible. For more information, see Migrate from EC2-Classic to a VPC in the Amazon EC2 User Guide, the blog EC2-Classic Networking is Retiring – Here’s How to Prepare, and Moving a DB instance not in a VPC into a VPC in the Amazon RDS User Guide.

See also: AWS API Documentation

Request Syntax

response = client.describe_db_security_groups(
    DBSecurityGroupName='string',
    Filters=[
        {
            'Name': 'string',
            'Values': [
                'string',
            ]
        },
    ],
    MaxRecords=123,
    Marker='string'
)
Parameters:
  • DBSecurityGroupName (string) – The name of the DB security group to return details for.

  • Filters (list) –

    This parameter isn’t currently supported.

    • (dict) –

      A filter name and value pair that is used to return a more specific list of results from a describe operation. Filters can be used to match a set of resources by specific criteria, such as IDs. The filters supported by a describe operation are documented with the describe operation.

      Note

      Currently, wildcards are not supported in filters.

      The following actions can be filtered:

      • DescribeDBClusterBacktracks

      • DescribeDBClusterEndpoints

      • DescribeDBClusters

      • DescribeDBInstances

      • DescribePendingMaintenanceActions

      • Name (string) – [REQUIRED]

        The name of the filter. Filter names are case-sensitive.

      • Values (list) – [REQUIRED]

        One or more filter values. Filter values are case-sensitive.

        • (string) –

  • MaxRecords (integer) –

    The maximum number of records to include in the response. If more records exist than the specified MaxRecords value, a pagination token called a marker is included in the response so that you can retrieve the remaining results.

    Default: 100

    Constraints: Minimum 20, maximum 100.

  • Marker (string) – An optional pagination token provided by a previous DescribeDBSecurityGroups request. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords.

Return type:

dict

Returns:

Response Syntax

{
    'Marker': 'string',
    'DBSecurityGroups': [
        {
            'OwnerId': 'string',
            'DBSecurityGroupName': 'string',
            'DBSecurityGroupDescription': 'string',
            'VpcId': 'string',
            'EC2SecurityGroups': [
                {
                    'Status': 'string',
                    'EC2SecurityGroupName': 'string',
                    'EC2SecurityGroupId': 'string',
                    'EC2SecurityGroupOwnerId': 'string'
                },
            ],
            'IPRanges': [
                {
                    'Status': 'string',
                    'CIDRIP': 'string'
                },
            ],
            'DBSecurityGroupArn': 'string'
        },
    ]
}

Response Structure

  • (dict) –

    Contains the result of a successful invocation of the DescribeDBSecurityGroups action.

    • Marker (string) –

      An optional pagination token provided by a previous request. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords.

    • DBSecurityGroups (list) –

      A list of DBSecurityGroup instances.

      • (dict) –

        Contains the details for an Amazon RDS DB security group.

        This data type is used as a response element in the DescribeDBSecurityGroups action.

        • OwnerId (string) –

          Provides the Amazon Web Services ID of the owner of a specific DB security group.

        • DBSecurityGroupName (string) –

          Specifies the name of the DB security group.

        • DBSecurityGroupDescription (string) –

          Provides the description of the DB security group.

        • VpcId (string) –

          Provides the VpcId of the DB security group.

        • EC2SecurityGroups (list) –

          Contains a list of EC2SecurityGroup elements.

          • (dict) –

            This data type is used as a response element in the following actions:

            • AuthorizeDBSecurityGroupIngress

            • DescribeDBSecurityGroups

            • RevokeDBSecurityGroupIngress

            • Status (string) –

              Provides the status of the EC2 security group. Status can be “authorizing”, “authorized”, “revoking”, and “revoked”.

            • EC2SecurityGroupName (string) –

              Specifies the name of the EC2 security group.

            • EC2SecurityGroupId (string) –

              Specifies the id of the EC2 security group.

            • EC2SecurityGroupOwnerId (string) –

              Specifies the Amazon Web Services ID of the owner of the EC2 security group specified in the EC2SecurityGroupName field.

        • IPRanges (list) –

          Contains a list of IPRange elements.

          • (dict) –

            This data type is used as a response element in the DescribeDBSecurityGroups action.

            • Status (string) –

              Specifies the status of the IP range. Status can be “authorizing”, “authorized”, “revoking”, and “revoked”.

            • CIDRIP (string) –

              Specifies the IP range.

        • DBSecurityGroupArn (string) –

          The Amazon Resource Name (ARN) for the DB security group.

Exceptions

  • RDS.Client.exceptions.DBSecurityGroupNotFoundFault

Examples

This example lists settings for the specified security group.

response = client.describe_db_security_groups(
    DBSecurityGroupName='mydbsecuritygroup',
)

print(response)

Expected Output:

{
    'ResponseMetadata': {
        '...': '...',
    },
}