args:
- description: Security Group ID (sg-xxxxxxxxx)
  name: groupId
  required: true
- description: JSON string of the ipPermissions. IpPermissions should have one or more rules which are composed of IpProtocol, FromPort, ToPort, or IpRanges. Refer to aws-ec2-describe-security-groups (https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-security-groups.html) for example/reference.
  isArray: true
  name: ipPermissions
  required: true
- auto: PREDEFINED
  description: Protocol to check. TCP/UDP/All(-1)
  name: protocol
  predefined:
  - tcp
  - udp
  - '-1'
  required: true
- description: Lower bound port range to be checked. If fromPort and toPort are not specified, all ports will be included.
  name: fromPort
- description: Upper bound port range to be checked. If fromPort and toPort are not specified, all ports will be included.
  name: toPort
- description: Security group region
  name: region
- auto: PREDEFINED
  default: true
  defaultValue: 'no'
  description: Include IPv6 in the result. By default, IPv6 is not included
  name: includeIPv6
  predefined:
  - 'yes'
  - 'no'
comment: Find Security Group rules which allows ::/0 (IPv4) or 0.0.0.0/0.
commonfields:
  id: AwsEC2GetPublicSGRules
  version: -1
enabled: true
name: AwsEC2GetPublicSGRules
outputs:
- contextPath: AWS.EC2.SecurityGroup.PublicRules
  description: List public Security Group rules
  type: Unknown
- contextPath: AWS.EC2.SecurityGroup.PublicRules.groupId
  description: Security Group ID
  type: String
- contextPath: AWS.EC2.SecurityGroup.PublicRules.ipProtocol
  description: IP Protocol (TCP/UDP/-1)
  type: String
- contextPath: AWS.EC2.SecurityGroup.PublicRules.fromPort
  description: Security Group rule's lower bound port range
  type: Number
- contextPath: AWS.EC2.SecurityGroup.PublicRules.toPort
  description: Security Group rule's upper bound port range
  type: Number
- contextPath: AWS.EC2.SecurityGroup.PublicRules.cidrIp
  description: Security Group rule's CIDR range
  type: String
- contextPath: AWS.EC2.SecurityGroup.PublicRules.region
  description: Region of the security group
  type: String
script: '-'
tags:
- Amazon Web Services
timeout: '0'
type: python
subtype: python3
dockerimage: demisto/python3:3.12.13.10116658
runas: DBotWeakRole
fromversion: 5.0.0