You can change the following network interface attributes:
Description
Security groups
Delete on termination
Source/destination check
Idle connection tracking timeout
You can't change the attributes of a requester-managed network interface.
Open the Amazon EC2 console at https://console.aws.amazon.com/ec2/.
In the navigation pane, choose Network Interfaces.
Select the checkbox for the network interface.
To change the description, do the following
Choose Actions, Change description.
For Description, enter a description.
Choose Save.
To change the security groups, do the following:
Choose Actions, Change security groups.
For Associated security groups, add and remove security groups as needed. The security group and network interface must be created for the same VPC.
Choose Save.
To change the termination behavior, do the following:
Choose Actions, Change termination behavior.
Select or clear Delete on termination, Enable.
Choose Save.
To change source/destination checking, do the following:
Choose Actions, Change source/dest check.
Select or clear Source/destination check, Enable.
Choose Save.
To change idle connection tracking timeouts, do the following:
Choose Actions, Modify idle connection tracking timeout.
Modify timeout values as needed. For more information, see Idle connection tracking timeout.
TCP established timeout: Timeout (in seconds) for idle TCP connections in an established state.
Min: 60 seconds
Max: 432000 seconds
Default: 350 seconds for C8gn instance types, and 432000 seconds for other instance types
Recommended: Less than 432000 seconds
UDP timeout: Timeout (in seconds) for idle UDP flows that have seen traffic only in a single direction or a single request-response transaction.
Min: 30 seconds
Max: 60 seconds
Default: 30 seconds
UDP stream timeout: Timeout (in seconds) for idle UDP flows classified as streams which have seen more than one request-response transaction.
Min: 60 seconds
Max: 180 seconds
Default: 180 seconds
Choose Save.
Use the following modify-network-interface-attribute command.
aws ec2 modify-network-interface-attribute \
--network-interface-id eni-1234567890abcdef0
\
--description "my updated description
"
Example: To modify the security groups
Use the following modify-network-interface-attribute command.
aws ec2 modify-network-interface-attribute \
--network-interface-id eni-1234567890abcdef0
\
--groups sg-1234567890abcdef0
Example: To modify the termination behavior
Use the following modify-network-interface-attribute command.
aws ec2 modify-network-interface-attribute \
--network-interface-id eni-1234567890abcdef0
\
--attachment AttachmentId=eni-attach-43348162abEXAMPLE
,DeleteOnTermination=false
Example: To enable source/destination checking
Use the following modify-network-interface-attribute command.
aws ec2 modify-network-interface-attribute \
--network-interface-id eni-1234567890abcdef0
\
--source-dest-check
Example: To modify idle connection tracking timout
Use the following modify-network-interface-attribute command. For more information, see Idle connection tracking timeout.
aws ec2 modify-network-interface-attribute \
--network-interface-id eni-1234567890abcdef0
\
--connection-tracking-specification TcpEstablishedTimeout=172800
,UdpStreamTimeout=90
,UdpTimeout=60
Use the Edit-EC2NetworkInterfaceAttribute cmdlet.
Edit-EC2NetworkInterfaceAttribute `
-NetworkInterfaceId eni-1234567890abcdef0
`
-Description "my updated description
"
Example: To modify the security groups
Use the Edit-EC2NetworkInterfaceAttribute cmdlet.
Edit-EC2NetworkInterfaceAttribute `
-NetworkInterfaceId eni-1234567890abcdef0
`
-Group sg-1234567890abcdef0
Example: To modify the termination behavior
Use the Edit-EC2NetworkInterfaceAttribute cmdlet.
Edit-EC2NetworkInterfaceAttribute `
-NetworkInterfaceId eni-1234567890abcdef0
`
-Attachment_AttachmentId eni-attach-43348162abEXAMPLE
`
-Attachment_DeleteOnTermination $false
Example: To enable source/destination checking
Use the Edit-EC2NetworkInterfaceAttribute cmdlet.
Edit-EC2NetworkInterfaceAttribute `
-NetworkInterfaceId eni-1234567890abcdef0
`
-SourceDestCheck $true
Example: To modify idle connection tracking timeouts
Use the Edit-EC2NetworkInterfaceAttribute cmdlet. For more information, see Idle connection tracking timeout.
Edit-EC2NetworkInterfaceAttribute `
-NetworkInterfaceId eni-1234567890abcdef0
`
-ConnectionTrackingSpecification_TcpEstablishedTimeout 172800
`
-ConnectionTrackingSpecification_UdpStreamTimeout 90
`
-ConnectionTrackingSpecification_UdpTimeout 60
Manage IP addresses
Multiple network interfaces
Did this page help you? - Yes
Thanks for letting us know we're doing a good job!
If you've got a moment, please tell us what we did right so we can do more of it.
Did this page help you? - No
Thanks for letting us know this page needs work. We're sorry we let you down.
If you've got a moment, please tell us how we can make the documentation better.
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4