{
  "SecurityGroups": [
    {
      "GroupId": "sg-0a1b2c3d4e5f60001",
      "GroupName": "web-frontend-sg",
      "Description": "Web frontend servers",
      "VpcId": "vpc-0aabbccdd1122334",
      "IpPermissions": [
        {
          "IpProtocol": "tcp",
          "FromPort": 80,
          "ToPort": 80,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": "HTTP from internet"}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 443,
          "ToPort": 443,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": "HTTPS from internet"}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 22,
          "ToPort": 22,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 8080,
          "ToPort": 8080,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "IpPermissionsEgress": [
        {
          "IpProtocol": "-1",
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "Tags": [
        {"Key": "Name", "Value": "web-frontend-sg"},
        {"Key": "Environment", "Value": "production"}
      ]
    },
    {
      "GroupId": "sg-0a1b2c3d4e5f60002",
      "GroupName": "app-backend-sg",
      "Description": "",
      "VpcId": "vpc-0aabbccdd1122334",
      "IpPermissions": [
        {
          "IpProtocol": "tcp",
          "FromPort": 8080,
          "ToPort": 8080,
          "IpRanges": [
            {"CidrIp": "10.0.0.0/8", "Description": ""}
          ],
          "UserIdGroupPairs": [
            {"GroupId": "sg-0a1b2c3d4e5f60001", "Description": "From web frontend"}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 8080,
          "ToPort": 8080,
          "IpRanges": [
            {"CidrIp": "10.0.1.0/24", "Description": "From app subnet"}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 22,
          "ToPort": 22,
          "IpRanges": [
            {"CidrIp": "10.0.0.0/8", "Description": "SSH from VPC"}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 3306,
          "ToPort": 3306,
          "IpRanges": [
            {"CidrIp": "10.0.1.0/24", "Description": "MySQL to DB tier"}
          ]
        }
      ],
      "IpPermissionsEgress": [
        {
          "IpProtocol": "-1",
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "Tags": [
        {"Key": "Name", "Value": "app-backend-sg"}
      ]
    },
    {
      "GroupId": "sg-0a1b2c3d4e5f60003",
      "GroupName": "database-sg",
      "Description": "RDS database instances",
      "VpcId": "vpc-0aabbccdd1122334",
      "IpPermissions": [
        {
          "IpProtocol": "tcp",
          "FromPort": 3306,
          "ToPort": 3306,
          "IpRanges": [
            {"CidrIp": "10.0.1.0/24", "Description": "App subnet"},
            {"CidrIp": "10.0.2.0/24", "Description": "Backend subnet"},
            {"CidrIp": "10.0.0.0/16", "Description": "Entire VPC"}
          ],
          "UserIdGroupPairs": [
            {"GroupId": "sg-0a1b2c3d4e5f60002", "Description": "From app backend"}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 3306,
          "ToPort": 3306,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        },
        {
          "IpProtocol": "tcp",
          "FromPort": 22,
          "ToPort": 22,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "IpPermissionsEgress": [
        {
          "IpProtocol": "-1",
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "Tags": [
        {"Key": "Name", "Value": "database-sg"},
        {"Key": "Environment", "Value": "production"}
      ]
    },
    {
      "GroupId": "sg-0a1b2c3d4e5f60004",
      "GroupName": "temp-debug",
      "Description": "",
      "VpcId": "vpc-0aabbccdd1122334",
      "IpPermissions": [
        {
          "IpProtocol": "tcp",
          "FromPort": 0,
          "ToPort": 65535,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        },
        {
          "IpProtocol": "udp",
          "FromPort": 0,
          "ToPort": 65535,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        },
        {
          "IpProtocol": "icmp",
          "FromPort": -1,
          "ToPort": -1,
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "IpPermissionsEgress": [
        {
          "IpProtocol": "-1",
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "Tags": [
        {"Key": "Name", "Value": "temp-debug"},
        {"Key": "CreatedBy", "Value": "mrodriguez"},
        {"Key": "Ticket", "Value": "OPS-4521"}
      ]
    },
    {
      "GroupId": "sg-0a1b2c3d4e5f60005",
      "GroupName": "monitoring-sg",
      "Description": "",
      "VpcId": "vpc-0aabbccdd1122334",
      "IpPermissions": [
        {
          "IpProtocol": "-1",
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "IpPermissionsEgress": [
        {
          "IpProtocol": "-1",
          "IpRanges": [
            {"CidrIp": "0.0.0.0/0", "Description": ""}
          ]
        }
      ],
      "Tags": [
        {"Key": "Name", "Value": "monitoring-sg"}
      ]
    }
  ]
}