撤销所有安全组入口规则（与源安全组）

Question

I have an ec2.SecurityGroup that I'd like to delete all rules from. I am having trouble removing the default ingress rule for the group, where the source is the security group's ID:

I do so this way, using the Go SDK:

for _, perm := sg.IpPermissions {
  for _, pair := range perm.UserIdGroupPairs {
    service.RevokeSecurityGroupIngress(&ec2.RevokeSecurityGroupIngressInput{
    SourceSecurityGroupName: pair.GroupId,
    IpProtocol: perm.IpProtocol,
    SourceSecurityGroupOwnerId: pair.UserId,
        GroupId: sg.GroupId,
    });
  }
}

However, this produces an error: "VPCIdNotSpecified: No default VPC for this user".
How am I supposed to revoke this rule, and ALL others? Go is preferred in answers but a way to accomplish this in any language would be appreciated.

Answer 1

I'm not a Go person, but here's some equivalent Python code:

import boto3

ec2_client = boto3.client('ec2')

response = ec2_client.describe_security_groups(GroupIds=['sg-xxx'])

for group in response['SecurityGroups']:
    ec2_client.revoke_security_group_ingress(GroupId=group['GroupId'], IpPermissions = group['IpPermissions'])

Notice that the IpPermissions object returned from describe_security_groups() can be passed directly into revoke_security_group_ingress() . Hopefully you can do the same thing in Go.