HEX
Server: LiteSpeed
System: Linux ip-172-31-76-142.ec2.internal 4.14.158-129.185.amzn2.x86_64 #1 SMP Tue Dec 24 03:15:32 UTC 2019 x86_64
User: 69b4844ae61d4e92bf26ad98af552775 (1065)
PHP: 7.2.27
Disabled: exec,passthru,shell_exec,system,eval
Upload Files
File: //lib/python2.7/site-packages/awscli/examples/ec2/describe-stale-security-groups.rst
**To describe stale security groups**

This example describes stale security group rules for ``vpc-11223344``. The response shows that sg-5fa68d3a in your account has a stale ingress SSH rule that references ``sg-279ab042`` in the peer VPC, and that ``sg-fe6fba9a`` in your account has a stale egress SSH rule that references ``sg-ef6fba8b`` in the peer VPC.

Command::

  aws ec2 describe-stale-security-groups --vpc-id vpc-11223344

Output::

  {
    "StaleSecurityGroupSet": [
        {
            "VpcId": "vpc-11223344", 
            "StaleIpPermissionsEgress": [
                {
                    "ToPort": 22, 
                    "FromPort": 22, 
                    "UserIdGroupPairs": [
                        {
                            "VpcId": "vpc-7a20e51f", 
                            "GroupId": "sg-ef6fba8b", 
                            "VpcPeeringConnectionId": "pcx-b04deed9", 
                            "PeeringStatus": "active"
                        }
                    ], 
                    "IpProtocol": "tcp"
                }
            ], 
            "GroupName": "MySG1", 
            "StaleIpPermissions": [], 
            "GroupId": "sg-fe6fba9a", 
            "Description": MySG1"
        }, 
        {
            "VpcId": "vpc-11223344", 
            "StaleIpPermissionsEgress": [], 
            "GroupName": "MySG2", 
            "StaleIpPermissions": [
                {
                    "ToPort": 22, 
                    "FromPort": 22, 
                    "UserIdGroupPairs": [
                        {
                            "VpcId": "vpc-7a20e51f", 
                            "GroupId": "sg-279ab042",
                            "Description": "Access from pcx-b04deed9", 
                            "VpcPeeringConnectionId": "pcx-b04deed9", 
                            "PeeringStatus": "active"
                        }
                    ], 
                    "IpProtocol": "tcp"
                }
            ], 
            "GroupId": "sg-5fa68d3a", 
            "Description": "MySG2"
        }
    ]
  }