Under library/aws/security_groups.py, the ipaddress.ip_network() call errors out if the network has host bits set. Setting strict to 'False' so this call doesn't error out. elif ipaddress.ip_network(cidr, False).is_global: