diff --git a/c7n/resources/vpc.py b/c7n/resources/vpc.py
index <HASH>..<HASH> 100644
--- a/c7n/resources/vpc.py
+++ b/c7n/resources/vpc.py
@@ -654,10 +654,10 @@ class SGPermission(Filter):
         OnlyPorts: [22, 443, 80]
 
       - type: egress
-        IpRanges:
-          - value_type: cidr
-          - op: in
-          - value: x.y.z
+        Cidr:
+          value_type: cidr
+          op: in
+          value: x.y.z
 
     """
docs - fix documentation about matching Cidr on security-groups (#<I>)