Add dynamic access rules to the EC2 security groups in an AWS account. Set schedules to remove and/or restore access rules using a web application running on an AMI. Changes are implemented through a Lambda function, triggered by CloudWatch rules. Users of the web application are defined in a Cognito Identity Pool.