AWS Security Group Rules Limit

Question

Is there any ways to trigger an alert when an AWS security group reach the maximum limit of 50 rules per group and when a maximum of 5 security group per Instance is created?

Answer 1

The AWS Trusted Advisor allows for a weekly status update. https://console.aws.amazon.com/trustedadvisor/

Some of its metrics include "Large Number of EC2 Security Group Rules Applied to an Instance" and "Large Number of Rules in an EC2 Security Group". There's a lot of other useful metrics in there as well.

I assume you know where you can check your current limits, but just in case: https://console.aws.amazon.com/ec2/v2/home?region=eu-west-1#Limits:

where you replace the region with the one you're interested in, or you can select it in the dropdown in the top right.

If the weekly updates are not enough it's probably easiest to just create a script that calls the API and tallies the current security groups and its rules.