Huawei Cloud Security Group List Skill

Overview

This skill lists all Huawei Cloud security groups owned by the authenticated account in the specified region. It is a read-only inventory skill: it never creates, modifies, deletes security groups, or changes any firewall rule.

Architecture:

Agent → hcloud CLI (KooCLI VPC, primary) → Huawei Cloud VPC API
       ↘ huaweicloudsdkvpc Python SDK (fallback)  ↗

Applicable Scenarios:

• Security group inventory and resource discovery
• Network security auditing (reviewing existing security groups)
• Troubleshooting connectivity (checking which security groups exist)
• Compliance reporting (enumerating all security groups per project)

Prerequisites

1. hcloud CLI (KooCLI) installed and authenticated — See references/cli-installation-guide.md
2. IAM permissions — vpc:securityGroups:list — See references/vpc-policies.md
3. Python 3.6+ with huaweicloudsdkvpc package (SDK fallback) — pip install huaweicloudsdkvpc

Credentials. KooCLI reads credentials from hcloud configure (AK/SK) or environment variables. The VPC API is region-scoped: the same account credentials used for other Huawei Cloud services work here, and --cli-region selects the region whose security groups are queried. Never ask the user to paste AK/SK into the conversation.

Workflow

1. Verify prerequisites — hcloud version, then run the list command (below)
2. Run the query — hcloud VPC ListSecurityGroups --cli-region=<region> (CLI primary) with desired options
3. Handle results — Parse security group IDs, names, descriptions, and tags; report the total security group count
4. Fallback — If the CLI is unavailable, use the Python SDK example below

Core Commands

List All Security Groups

hcloud VPC ListSecurityGroups --cli-region=cn-north-4

List Security Groups (JSON Output)

hcloud VPC ListSecurityGroups --cli-region=cn-north-4 --cli-output=json

Filter by Security Group Name

hcloud VPC ListSecurityGroups --cli-region=cn-north-4 --name.1=<sg-name>

Filter by Security Group ID

hcloud VPC ListSecurityGroups --cli-region=cn-north-4 --id.1=<sg-id>

Filter by Enterprise Project

hcloud VPC ListSecurityGroups --cli-region=cn-north-4 --enterprise_project_id=0

Pagination (limit + marker)

hcloud VPC ListSecurityGroups --cli-region=cn-north-4 --limit=10 --marker=<last-sg-id>

SDK Fallback Example

import os
from huaweicloudsdkcore.auth.credentials import BasicCredentials
from huaweicloudsdkvpc.v3 import VpcClient
from huaweicloudsdkvpc.v3.model import ListSecurityGroupsRequest
from huaweicloudsdkvpc.v3.region.vpc_region import VpcRegion

credentials = BasicCredentials(
    os.environ["HUAWEI_CLOUD_ACCESS_KEY"],
    os.environ["HUAWEI_CLOUD_SECRET_KEY"],
)
client = VpcClient.new_builder() \
    .with_credentials(credentials) \
    .with_region(VpcRegion.value_of("cn-north-4")) \
    .build()

response = client.list_security_groups(ListSecurityGroupsRequest())
groups = response.security_groups or []
for sg in groups:
    print(sg.id, sg.name, sg.description, sg.enterprise_project_id)
print("Security group number:", len(groups))

Parameter Confirmation

Reference Documents

• CLI Installation Guide
• VPC Policies
• Verification Method
• Data Flow Diagram
• Acceptance Criteria

KooCLI Command Format Standard

The hcloud VPC module maps directly to the Huawei Cloud VPC API operations.