$ aws ec2 describe-security-groups --group-ids sg-06e00f2565f145c41 --region eu-west-1 --query SecurityGroups[].IpPermissions[?FromPort==`3306`]
# run 2026-08-24T09:07:28Z by olaf
# exit 0

[
    [
        {
            "IpProtocol": "tcp",
            "FromPort": 3306,
            "ToPort": 3306,
            "UserIdGroupPairs": [
                {
                    "Description": "prod soon-server tasks via peering",
                    "UserId": "742816139593",
                    "GroupId": "sg-070db60028750f656",
                    "VpcId": "vpc-01e622e77e8e5565b",
                    "VpcPeeringConnectionId": "pcx-0853e2e1882f5267a",
                    "PeeringStatus": "active"
                }
            ],
            "IpRanges": [
                {
                    "CidrIp": "77.164.252.120/32"
                },
                {
                    "Description": "prod ECS NAT egress",
                    "CidrIp": "54.74.20.76/32"
                },
                {
                    "Description": "prod ECS NAT egress",
                    "CidrIp": "63.35.77.161/32"
                },
                {
                    "Description": "prod ECS NAT egress",
                    "CidrIp": "52.212.176.206/32"
                }
            ],
            "Ipv6Ranges": [],
            "PrefixListIds": []
        }
    ]
]