Add WinRM to all SecurityGroups that have RDP

add-winrm.ps1

$Ips = @("192.168.1.1")
foreach($Region in $(Get-AWSRegion).Region){
    $SecurityGroupsContainingRDP = Get-EC2SecurityGroup -region $Region| ?{$_.ippermission.FromPort -eq 3389} 
    Foreach($SecurityGroup in $SecurityGroupsContainingRDP){
        Write-Verbose "Adding WinRM to $($SecurityGroup.GroupID)"
        try{
            Grant-EC2SecurityGroupIngress -GroupId $SecurityGroup.GroupId -region $Region -IpPermission @{IpProtocol="TCP";FromPort=5985;ToPort=5986;IPRanges=$IPs}
        }catch{
            if($_.exception.message -like "*already exists*"){
                Write-Verbose "`tRule already exists"
            }else{
                Write-Error $_.exception.message
            }
        }
    } 
}