While investigating capitalone/cloud-custodian#541, I think I may have found a typo. Shouldn’t the filter be set to “GroupIds” on this line? https://github.com/scopely-devops/skew/blob/develop/skew/resources/aws/ec2.py#L45