title: Are AWS Security Group Port Ranges Inclusive or Exclusive
body: <p>AWS security groups allow a port range to be specified for permitted traffic, written in the form <code>1234-5678</code>: would that be inclusive of ports <code>1234</code> and <code>5678</code>, or exclusive of either/both of those ports?</p>
  
  <p>The <a href="http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-network-security.html#adding-security-group-rule" rel="nofollow noreferrer">documentation</a> doesn't seem to describe this.</p>