AWS Modify Default Security Group Bash Script

aws_modify_default_security_group.sh

groupname=default

regions=$(aws ec2 describe-regions \
  --output text \
  --query 'Regions[*].RegionName')

for region in $regions; do

  default_group_id=$(aws ec2 describe-security-groups --region $region --group-name $groupname \
    | jq -r '.SecurityGroups[] | .GroupId')
  
  echo "Revoking any/any rule from default groupID: $default_group_id in region: $region"
  aws ec2 revoke-security-group-ingress \
    --region "$region" \
    --group-name "$groupname" \
    --proto "all" \
    --port "all" \
    --source-group "$default_group_id"
  
  echo "Adding rules to $groupname in $region..."
  aws ec2 authorize-security-group-ingress \
    --region "$region" \
    --group-name "$groupname" \
    --protocol "tcp" \
    --port "22" \
    --cidr "0.0.0.0/0"
  aws ec2 authorize-security-group-ingress \
    --region "$region" \
    --group-name "$groupname" \
    --protocol "tcp" \
    --port "80" \
    --cidr "0.0.0.0/0"
  aws ec2 authorize-security-group-ingress \
    --region "$region" \
    --group-name "$groupname" \
    --protocol "tcp" \
    --port "443" \
    --cidr "0.0.0.0/0"

done