does not clean up security groups

[Jeff Pihach]

Using 2.0.0-trusty-amd64

When destroying a controller I got the following error message:

ERROR cannot determine security groups to delete: cannot retrieve instance information from aws to delete security groups: 503 Service Unavailable

Going into the aws console I see I have over 150 security groups so it doesn't look like Juju is cleaning them up.

[Martin Packman (gz)]

Have you got any additional information on the circumstances this appeared in, or subsequent occurrences?

As seen in CI testing, in normal operation juju does correctly delete security groups in ec2:

<http://reports.vapour.ws/releases/4648/job/aws-native-deploy-bundle/attempt/690>

However cloud outage and other test problems can result in resource leakage, so we do have a fallback script that goes around deleting old security groups as well.

[Jeff Pihach (hatch)]

I don't, it is likely a spurious issue and one that over the past few years has created and left quite a few

[Anastasia (anastasia-macmood)]

As per comment # 1, we cannot reproduce the issue without a scenario.
Our testing shows that ec2 security groups are deleted.