Managing default security groups in VPC with Puppet

aws.pp

ec2_securitygroup { 'default security group for some vpc': # <= this is a unique title
  ensure      => present,
  name        => 'default', # <= this is the actual security group name in AWS
  region      => 'sa-east-1',
  vpc         => 'sample-vpc',
  description => 'default VPC security group',
  ingress     => [{
    protocol => 'tcp',
    port     => 22,
    cidr     => '0.0.0.0/0'
  }],
}