title: chef provisioning recipe to make AWS security groups, how to run from server vs chef client
body: <p>I need to keep track of my AWS security groups better.</p>
  
  <p>The recipes that use chef/provisioning/aws_driver would let me make recipes per SG and track IPs added/etc.</p>
  
  <p>I can run them just fine locally with chef-client -z -r </p>
  
  <p>What I really want is to upload the cookbook to my chef server and run it any time I need to change a SG.  But chef seems to require recipes apply to nodes, not to AWS cloudiness.</p>
  
  <p>Basically I want to run chef-client from my workstation and have it execute a cookbook that doesn't impact any running servers, or create them, but rather hits AWS and converges the resources specified.</p>