> For the complete documentation index, see [llms.txt](https://docs.duplocloud.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.duplocloud.com/docs/automation-platform/overview/security-configuration-settings/system-security-settings.md). # System Security settings Configure global system settings for the DuploCloud Portal ## Configuring global System Security settings To configure global System Security settings for the DuploCloud Portal, navigate to **Administrator** -> **System Settings** in the DuploCloud Portal and click the **System Config** tab.

**System Config** tab for **System Settings**

To update or remove an existing setting, click the menu (

) icon to the left of the setting and select **Update** or **Delete**. To add any of these settings, click **Add.** Using the Add Config pane, select the **Config Type** and **Key** from the table below and enter the appropriate **Value**. ### System Security settings

System Config Setting (Key)	Description	Config Type	Description	Config Type	Value
Disable SSH Key Download	Setting Value to True prevents a user from downloading an SSH key	Flags	Setting to Falsey	Flags	False
Disable Host Creation with Custom AMI	Default is False, allowing host creation with a custom AMI unless you set Value to True.	Flags	Default: Allowed Enable to restrict using Custom AMI for EC2 creation	Flags
Duplo Managed Tag Keys	Allows you to configure Custom Tags for AWS resources that you create from the DuploCloud Portal.	App Config	Allows to configure Custom Tags for the AWS resources created from portal	AppConfig
Block Master VPC CIDR Allow in EKS SG	Setting Value to True prevents a user from adding DuploCloud Master VPC CiDR to an EKS Security Group definition.	Flags	Setting this Flag, resticts adding Duplo master VPC CIDR to EKS Security Group	Flags

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation by asking a question. Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters: ``` GET https://docs.duplocloud.com/docs/automation-platform/overview/security-configuration-settings/system-security-settings.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.