This covers Docker Engine >=1.12, and it's built-in Swarm Mode (Docker Services) ports. Below that, I also include the "Classic" Swarm ports from 1.11 and older. In each, there's an table of how they would look in AWS Security Groups. Grab the gist here.