cf.json

{
    "AWSTemplateFormatVersion": "2010-09-09",
    "Description": "Configuration for API queues, security groups and other general configuration",
    "Resources": {
        "ApiSecurityGroupProduction": {
            "Type": "AWS::EC2::SecurityGroup",
            "Properties": {
                "GroupDescription": "Group for the api instances",
                "GroupName": "api_production",
                "SecurityGroupIngress": [
                    {
                        "IpProtocol": "tcp",
                        "FromPort": "8000",
                        "ToPort": "8000",
                        "SourceSecurityGroupId": "sg-843f59ed"
                    },
                    {
                        "IpProtocol": "tcp",
                        "FromPort": "22",
                        "ToPort": "22",
                        "SourceSecurityGroupName": "chef_server"
                    }
                ]
            }
        },
        "ApiWorkerSecurityGroupProduction": {
            "Type": "AWS::EC2::SecurityGroup",
            "Properties": {
                "GroupDescription": "Worker role, no traffic inside",
                "GroupName": "api_worker_production",
                "SecurityGroupIngress": [
                    {
                        "IpProtocol": "tcp",
                        "FromPort": "22",
                        "ToPort": "22",
                        "SourceSecurityGroupName": "chef_server"
                    }
                ]
            }
        }
    }
}