Cloud Foundry Default Security Groups
In the SAP BTP Cloud Foundry environment, Security Groups are collections of rules that control network traffic for applications. Developers use them to define which outbound and inbound network connections are permitted for their Cloud Foundry applications, helping to enforce security boundaries at the network level.
Docs explaining this concept
Prerequisites
- Concept SAP BTP Cockpit The concept name was not provided and the supplied source snippets do not define or describe a single, identifiable SAP developer concept — they cover a range of unrelated SAP BTP topics such as Kyma environment setup, Cloud Foundry org deletion, subaccount management, and service instances. A focused definition cannot be grounded solely in these sources without a clearly stated concept to define.
- Concept Cloud Foundry Spaces and Subaccounts The concept name is not defined in the provided sources, and the available snippets cover distinct topics — such as [creating routes](https://help.sap.com/docs/btp/sap-business-technology-platform/9fddeea396b34b528bc8d286f3d5d9cf?locale=en-US&state=PRODUCTION&version=Cloud), [managing Cloud Foundry spaces](https://help.sap.com/docs/btp/sap-business-technology-platform/5209d55d8dd84228897112b0655d999b?locale=en-US&state=PRODUCTION&version=Cloud), and creating service keys — without a shared concept tying them together. Because the concept to be defined is explicitly marked as "undefined" and no single coherent concept can be grounded solely in the provided sources, a reliable definition cannot be produced.
- Concept Roles in the Cloud Foundry Environment The concept name was not provided, so a precise definition cannot be generated from the available sources. Based on the sources, the closest identifiable concept appears to be a **Cloud Foundry Space** — a logical environment within a Cloud Foundry org on SAP BTP that developers use to deploy and manage applications and services. As described in [Managing Spaces](https://help.sap.com/docs/btp/sap-business-technology-platform/5209d55d8dd84228897112b0655d999b?locale=en-US&state=PRODUCTION&version=Cloud), spaces contain resources such as apps and service instances, and access is controlled by assigning roles to space members. Developers can manage space membership — including adding or removing users and their roles — directly in the SAP BTP cockpit, as outlined in [Delete Space Members](https://help.sap.com/docs/btp/sap-business-technology-platform/78b20cf8ae584498822dbd5c30e75b52?locale=en-US&state=PRODUCTION&version=Cloud).
- Concept Cloud Foundry Architecture & Components Cloud Foundry is an open-source platform-as-a-service environment available on SAP Business Technology Platform that developers use to build, deploy, and run cloud-native applications. It provides a structured runtime architecture with components such as application containers, routing, and service brokers that abstract underlying infrastructure concerns. Developers can find [additional information about Cloud Foundry](https://help.sap.com/docs/btp/sap-business-technology-platform/1c6cba872ce24f2ba24f53feb6dbce6d?locale=en-US&state=PRODUCTION&version=Cloud) in the SAP BTP documentation to understand how its components work together within the platform.