Skip to main content

IMPORTANT - Product End of Life Statement - IMPORTANT

Request RE, Survey, and Calendar 1.5 Support Ending December 31, 2020
Contact Kinetic Data Support with Questions
Kinetic Community

AWS EC2 Revoke Security Group Ingress

Removes one or more ingress rules from a security group.


By downloading this file, you acknowledge that you agree to our Terms of Service

Detailed Description

This handler uses the AWS REST API to Remove one or more ingress rules from a security group. The values that you specify in the revoke request (for example, ports) must match the existing rule's values for the rule to be removed. Each rule consists of the protocol and the CIDR range or source security group. For the TCP and UDP protocols, you must also specify the destination port or range of ports. For the ICMP protocol, you must also specify the ICMP type and code. Rule changes are propagated to instances within the security group as quickly as possible. However, a small delay might occur. This handler implements a subset of the full AWS call (single rule submission only). For more information see the AWS Amazon Virtual Private Cloud User Guide online.

The Dry Run parameter validates user permissions and inputs. If it is set to true, an error will always be thrown by the handler before completing the handler action. Error response will be 'DryRunOperation' if the account has proper permissions and inputs; 'UnauthorizedOperation' if the account does not have proper permissions.


Name Description
Dry Run Dry run validates user permissions and inputs without completing the EC2 action (true or false).
Group Name The name of the security group.
Group ID The ID of the security group. Required for a non-default VPC.
Source Security Group Name The name of the source security group.
Source Security Owner ID The AWS account ID for the source security group.
IP Protocol The IP protocol name (tcp, udp, icmp). Use -1 to specify all.
From Port The start of port range for the TCP and UDP protocols, or an ICMP type number.
To Port The end of port range for the TCP and UDP protocols, or an ICMP code number.
CIDR IP Address Range The CIDR IP address range.

Sample Configuration

Parameter Example Configuration
Dry Run
Group Name
Group ID
Source Security Group Name
Source Security Owner ID
IP Protocol
From Port
To Port
CIDR IP Address Range


This handler returns no results

Change Log

Version Date Description
1 2017-08-24 * Initial version. See README for details.