Security groups allow you to specify rules to control network traffic over specific ports.

You can specify security groups when creating a reservation and also in the blueprint canvas. You can also specify security groups when requesting a machine.

Security groups are imported during data collection.

Each available region requires at least one specified security group. When you create a reservation, the available security groups that are available to you in that region are displayed. Every region includes at least the default security group.

Additional security groups must be managed in the source resource. For more information about managing security groups for the various machines, see the OpenStack documentation.