'Make sure the SG does not contain large port ranges.'

def check_securitygroup_large_port_range(self, sg_item):

    multiplier = _check_empty_security_group(sg_item)
    for rule in sg_item.config.get('rules', []):
        if (rule['from_port'] == rule['to_port']):
            continue
        from_port = int(rule['from_port'])
        to_port = int(rule['to_port'])
        range_size = (to_port - from_port)
        name = ''
        if rule.get('cidr_ip', None):
            name = rule['cidr_ip']
        else:
            name = rule.get('name', 'Unknown')
        note = '{}    on    {}'.format(name, self._port_for_rule(rule))
        if (range_size > 2500):
            self.add_issue((4 * multiplier), 'Port    Range    >    2500    Ports', sg_item, notes=note)
            continue
        if (range_size > 750):
            self.add_issue((3 * multiplier), 'Port    Range    >    750    Ports', sg_item, notes=note)
            continue
        if (range_size > 250):
            self.add_issue((1 * multiplier), 'Port    Range    >    250    Ports', sg_item, notes=note)
            continue
