This script uses ansible EC2 invetory script to list all security groups currently in use. This can be used to clean up unused SGs

securityGroupsInUse.sh

#!/usr/bin/env bash

set -e
set -u

# This script expects that ansible, ansible EC2 invetory script are already installed and setup correctly.
# The EC2 invetory script should be named /etc/ansible/hosts.

if hash ansible  2>/dev/null; then
  if [[ ! -f /etc/hosts/ansible ]]; then
    /etc/ansible/hosts > /dev/null
    echo ""
    echo "Security groups in use."
    echo "-------------------------------------------------------------------------"
    grep security_group_names < $HOME/.ansible/tmp/ansible-ec2.cache | sort | uniq | awk  '{ print $2 }' | awk  -F "\"" '{ print $2 }' | sort -i
   else
    echo "EC2 inventory script was not found in /etc/ansible/hosts"
    exit 1
  fi
else
  echo "Ansible is not installed!!"
  exit 1
fi