Already had to make some changes, since security groups as defined there apparently allow port 80 to instances, not only to LB