The port range should be either a single number or a hyphenated range, similar to the way ModifySecurityGroup does it, rather than two separate args.