> For the complete documentation index, see [llms.txt](https://docs.duplocloud.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.duplocloud.com/docs/automation-platform/overview/security-configuration-settings/system-security-settings.md).

# System Security settings

## Configuring global System Security settings

To configure global System Security settings for the DuploCloud Portal, navigate to **Administrator** -> **System Settings** in the DuploCloud Portal and click the **System Config** tab.

<figure><img src="/files/uPS3Nwef6SI8CI1x88pk" alt=""><figcaption><p><strong>System Config</strong> tab for <strong>System Settings</strong></p></figcaption></figure>

To update or remove an existing setting, click the menu (<img src="/files/7DagHksotNef8625xoXr" alt="" data-size="line">) icon to the left of the setting and select **Update** or **Delete**. To add any of these settings, click **Add.** Using the Add Config pane, select the **Config Type** and **Key** from the table below and enter the appropriate **Value**.

### System Security settings

<table><thead><tr><th width="358">System Config Setting (Key)</th><th>Description</th><th>Config Type</th><th data-hidden>Description</th><th data-hidden>Config Type</th><th data-hidden>Value</th></tr></thead><tbody><tr><td><strong>Disable SSH Key Download</strong></td><td>Setting <strong>Value</strong> to <strong>True</strong> prevents a user from downloading an SSH key</td><td><strong>Flags</strong></td><td>Setting to Falsey</td><td><strong>Flags</strong></td><td><strong>False</strong></td></tr><tr><td><strong>Disable Host Creation with Custom AMI</strong></td><td>Default is <strong>False</strong>, allowing host creation with a custom AMI unless you set <strong>Value</strong> to <strong>True</strong>.</td><td><strong>Flags</strong></td><td>Default: Allowed<br><br>Enable to restrict using Custom AMI for EC2 creation</td><td><strong>Flags</strong></td><td></td></tr><tr><td><strong>Duplo Managed Tag Keys</strong></td><td>Allows you to configure <a href="/pages/aVBc7FjD5qsTbPdjDlkD">Custom Tags</a> for AWS resources that you create from the DuploCloud Portal.</td><td><strong>App Config</strong></td><td>Allows to configure Custom Tags for the AWS resources created from portal</td><td><strong>AppConfig</strong></td><td></td></tr><tr><td><strong>Block Master VPC CIDR Allow in EKS SG</strong></td><td>Setting <strong>Value</strong> to <strong>True</strong> prevents a user from adding DuploCloud Master VPC CiDR to an EKS Security Group definition.</td><td><strong>Flags</strong></td><td>Setting this Flag, resticts adding Duplo master VPC CIDR to EKS Security Group</td><td><strong>Flags</strong></td><td></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.duplocloud.com/docs/automation-platform/overview/security-configuration-settings/system-security-settings.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.