要给出"AWS - 安全组"的代码示例，首先需要了解安全组的基本概念和使用方法。

安全组是AWS中用于控制入站和出站流量的虚拟防火墙，它可以与一个或多个EC2实例关联。安全组规则允许或拒绝特定的IP地址、协议和端口的流量。

以下是一个使用Python和boto3库创建和配置安全组的示例代码：

1. 安装boto3库

pip install boto3

2. 导入boto3库和AWS凭证

import boto3
from botocore.exceptions import ClientError

# 配置AWS凭证
aws_access_key_id = 'YOUR_ACCESS_KEY'
aws_secret_access_key = 'YOUR_SECRET_KEY'
region_name = 'us-west-2'

# 创建EC2客户端
ec2 = boto3.client('ec2', region_name=region_name, aws_access_key_id=aws_access_key_id, aws_secret_access_key=aws_secret_access_key)

3. 创建安全组

def create_security_group(group_name, description):
    try:
        response = ec2.create_security_group(
            GroupName=group_name,
            Description=description
        )
        security_group_id = response['GroupId']
        print(f"Security group created with ID: {security_group_id}")
        return security_group_id
    except ClientError as e:
        print(e)

# 使用示例
security_group_id = create_security_group('MySecurityGroup', 'My security group')

4. 添加入站规则

def add_inbound_rule(security_group_id, ip_protocol, from_port, to_port, cidr_ip):
    try:
        ec2.authorize_security_group_ingress(
            GroupId=security_group_id,
            IpPermissions=[
                {
                    'IpProtocol': ip_protocol,
                    'FromPort': from_port,
                    'ToPort': to_port,
                    'IpRanges': [{'CidrIp': cidr_ip}]
                }
            ]
        )
        print("Inbound rule added successfully")
    except ClientError as e:
        print(e)

# 使用示例
add_inbound_rule(security_group_id, 'tcp', 22, 22, '0.0.0.0/0')

5. 添加出站规则

def add_outbound_rule(security_group_id, ip_protocol, from_port, to_port, cidr_ip):
    try:
        ec2.authorize_security_group_egress(
            GroupId=security_group_id,
            IpPermissions=[
                {
                    'IpProtocol': ip_protocol,
                    'FromPort': from_port,
                    'ToPort': to_port,
                    'IpRanges': [{'CidrIp': cidr_ip}]
                }
            ]
        )
        print("Outbound rule added successfully")
    except ClientError as e:
        print(e)

# 使用示例
add_outbound_rule(security_group_id, '-1', 0, 0, '0.0.0.0/0')

通过上述代码示例，我们可以创建一个安全组，并添加入站和出站规则。请根据实际需求修改代码中的参数值。记得替换aws_access_key_id和aws_secret_access_key为你自己的AWS凭证。