> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nebius.com/llms.txt
> Use this file to discover all available pages before exploring further.

# nebius_vpc_v1_security_group resource

SecurityGroup is a logical grouping of resources
used to manage and apply network security policies collectively.
Security group applies implicit deny at the end (traffic not matched by any rule will be denied).

## Schema

### Required

* `network_id` (String) ID of the VPC network this security group belongs to.
* `parent_id` (String) Identifier of the parent resource to which the resource belongs.

### Optional

* `labels` (Map of String) Labels associated with the resource.
* `metadata` (Attributes) :

  `metadata.parent_id` represents the Project.

  #### Inner value description

  Common resource metadata. (see [below for nested schema](#nestedatt--metadata))
* `name` (String) Human readable name for the resource.

### Read-Only

* `created_at` (String) :

  Timestamp indicating when the resource was created.

  A string representing a timestamp in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format: `YYYY-MM-DDTHH:MM:SSZ` or `YYYY-MM-DDTHH:MM:SS.SSS±HH:MM`
* `id` (String) Identifier for the resource, unique for its resource type.
* `resource_version` (Number) :

  Version of the resource for safe concurrent modifications and consistent reads.
  Positive and monotonically increases on each resource spec change (but *not* on each change of the
  resource's container(s) or status).
  Service allows zero value or current.
* `status` (Attributes) Current status of the security group. (see [below for nested schema](#nestedatt--status))
* `updated_at` (String) :

  Timestamp indicating when the resource was last updated.

  A string representing a timestamp in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format: `YYYY-MM-DDTHH:MM:SSZ` or `YYYY-MM-DDTHH:MM:SS.SSS±HH:MM`

<a id="nestedatt--metadata" />

### Nested Schema for `metadata`

<a id="nestedatt--status" />

### Nested Schema for `status`

Read-Only:

* `default` (Boolean) :

  Indicates if this is the default security group for the network.
  Only one security group can be default per network.
  Will be used on the interface if no other is specified.
* `state` (String) :

  Current state of the security group.

  #### Supported values

  Enumeration of possible states of the security group.
  Possible values:

  * `STATE_UNSPECIFIED` - Default state, unspecified.
  * `READY` - Security group is ready for use.