使用 boto3 从 EC2 实例附加/分离安全组

Question

如何解除特定安全组与所有 EC2 实例的关联，然后将其与新的 EC2 实例关联，boto3？

我正在尝试类似的东西：

ec2 = boto3.resource('ec2')
instances = ec2.instances.filter()
for instance in instances:
    print(instance.id, instance.instance_type)
    for sg in instance.security_groups:
    if sg['GroupId'] == sg_id:
        instance.modify_attribute ???

Answer 1

  ec2 = boto3.resource('ec2')
  instances = ec2.instances.filter()
  for instance in instances:
     print(instance.id, instance.instance_type)
     all_sg_ids = [sg['GroupId'] for sg in instance.security_groups]  # Get a list of ids of all securify groups attached to the instance
     if sg_id in all_sg_ids:                                          # Check the SG to be removed is in the list
       all_sg_ids.remove(sg_id)                                       # Remove the SG from the list
       instance.modify_attribute(Groups=all_sg_ids)                   # Attach the remaining SGs to the instance