This message was deleted.

Ah 🤦 Security group rules come separately from security groups themselves, so I can manage rules after the machines are created.