delete unused aws security groups based on secgroup name matching

security-group-cleanup.py

#!/usr/bin/env python

import os
import re
import sys
import boto
import pprint


del_match = sys.argv[1]
del_flag = ''
if len(sys.argv) == 3:
    del_flag = sys.argv[2]

print "del_match: %s" % del_match
print "del_flag: %s" % del_flag

pp = pprint.PrettyPrinter(indent=4)
ec2 = boto.connect_ec2(os.environ['AWS_ACCESS_KEY_ID'],os.environ['AWS_SECRET_ACCESS_KEY'])

del_groups = []
groups = ec2.get_all_security_groups()
for group in groups:
    if re.search(del_match, group.name):
        del_groups.append(group.id)

if del_flag == '--delete':
    print "delete security groups:"
    for group in del_groups:
        try:
            ec2.delete_security_group(group_id=group)
        except Exception, dontstop:
            print "%s is in use" % group
else:
    print "The list of security groups to be removed if not used is below."
    print "Run this again with `--delete` to remove them"
    pp.pprint(sorted(del_groups))