$ErrorActionPreference = "Stop"

$gpuGroups = @(
  "sg-0b144c17b1b89f4c6",
  "sg-05e4de3fe94ad6558"
)

$ingressGroup = "sg-0721b8b48e12c531d"

try {
  aws ec2 authorize-security-group-ingress `
    --group-id "sg-0b144c17b1b89f4c6" `
    --ip-permissions "[{\"IpProtocol\":\"tcp\",\"FromPort\":8188,\"ToPort\":8188,\"UserIdGroupPairs\":[{\"GroupId\":\"$ingressGroup\",\"Description\":\"Allow ComfyUI from ingress\"}]}]" | Out-Null
} catch {
}

foreach ($group in $gpuGroups) {
  foreach ($port in 8118, 8188) {
    try {
      aws ec2 revoke-security-group-ingress `
        --group-id $group `
        --protocol tcp `
        --port $port `
        --cidr 0.0.0.0/0 | Out-Null
    } catch {
    }
  }
}

aws ec2 describe-security-groups `
  --group-ids $gpuGroups `
  --query "SecurityGroups[].{GroupId:GroupId,GroupName:GroupName,Ingress:IpPermissions}" `
  --output json