diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2992886..d36c54b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,3 +14,7 @@
 * v1.0.2 -- 20210505
   - add nacls, nacls-rules
   - move variables into more common things and make links
+
+* v1.0.3 -- 20210512
+  - security-groups
+    - add output of security_groups map(object{name,id,arn})
diff --git a/common/version.tf b/common/version.tf
index 02c6357..1dfb710 100644
--- a/common/version.tf
+++ b/common/version.tf
@@ -1,3 +1,3 @@
 locals {
-  _module_version = "1.0.2"
+  _module_version = "1.0.3"
 }
diff --git a/security-groups/README.md b/security-groups/README.md
index 051f790..333f6a5 100644
--- a/security-groups/README.md
+++ b/security-groups/README.md
@@ -62,4 +62,6 @@ No requirements.
 
 ## Outputs
 
-No outputs.
+| Name | Description |
+|------|-------------|
+| <a name="output_security_groups"></a> [security\_groups](#output\_security\_groups) | Security Group map(object{name, id, arn}) |
diff --git a/security-groups/outputs.tf b/security-groups/outputs.tf
new file mode 100644
index 0000000..0a5eeb0
--- /dev/null
+++ b/security-groups/outputs.tf
@@ -0,0 +1,20 @@
+output "security_groups" {
+  description = "Security Group map(object{name, id, arn})"
+  value = {
+    it-linux-base = {
+      name = "it-linux-base"
+      id   = module.sg-linux-base.this_security_group_id
+      arn  = module.sg-linux-base.this_security_group_arn
+    }
+    it-windows-base = {
+      name = "it-windows-base"
+      id   = module.sg-windows-base.this_security_group_id
+      arn  = module.sg-windows-base.this_security_group_arn
+    }
+    ois-scanner = {
+      name = "ois-scanner"
+      id   = module.sg-ois-scanner.this_security_group_id
+      arn  = module.sg-ois-scanner.this_security_group_arn
+    }
+  }
+}