cfn-security-group.yaml

  Parameters: 
    SSHLocation:
      Description: "Allow SSH to instance from this IP"
      Type: "String"  
    VpcId:
      Description: VpcId for the SG  
      Type: AWS::EC2::VPC::Id
  Resources: 
    InstanceSecurityGroup: 
      Type: "AWS::EC2::SecurityGroup"
      Properties: 
        VpcId: 
          Ref: "VpcId"
        GroupDescription: "Enable SSH access via port 22"
        SecurityGroupIngress: 
          - 
            IpProtocol: "tcp"
            FromPort: "22"
            ToPort: "22"
            CidrIp: 
              Ref: "SSHLocation"
          - 
            IpProtocol: "tcp"
            FromPort: "80"
            ToPort: "80"
            CidrIp: "0.0.0.0/0"