Bash script to revoke Inbound rule after some time

Question

I have done bash script (bash script + AWS CLI) to assign Inbound rules with IP address for security group in AWS EC2 instances. My team asking me to revoke IP address from security group automatically after two hours. So when allocate new rules ,then it should alive for two hours. Then it should removed from security group. I hope you people understand this question. Kindly reply with solution. Many thanks.

Answer 1

Hi@Lakshminarayanan,

You can find command to remove your ingress rule from the security group. You can use the below-given command in your script file.

$ aws ec2 revoke-security-group-ingress --group-name mygroup --protocol tcp --port 22 --cidr 203.0.113.0/24

Now to automate the script you can use Cron Job concept and schedule your task every two hours.

Comments

Many thanks @MD. I understand this solution. We can use cron job to revoke inbound rule. But how can i remove exact IP address which is allocated before. Because inbound rules have like Port 22 with IP addresses 1.1.1.1 , 2.2.2.2, 3.3.3.3. The IP address 2.2.2.2 which is assigned before. So i would like to remove this IP. But how can i judge this IP and how to do remove?please reply me bro

---

I think you can add a description in every rule. When we create any rule, there is an optional option named description. You can remove this based on this.

---

Yes bro. I will try this method. Once again, Many thanks.