This is a very good idea. It could be script-able using the AWS API[1] (though I haven't tried it yet). [1] http://docs.aws.amazon.com/AWSEC2/latest/APIReferen

This is a very good idea. It could be script-able using the AWS API[1] (though I haven't tried it yet). [1] http://docs.aws.amazon.com/AWSEC2/latest/APIReference/ApiReference-query-AuthorizeSecurityGroupIngress.html#ApiReference-query-AuthorizeSecurityGroupIngress-Examples http://docs.aws.amazon.com/AWSEC2/latest/APIReference/ApiRef... [EDIT] The relevant example is 4th in the list.