Explanation: When dealing with security groups, bear in mind that you can freely add and remove rules from agroup, but you can't change the outbound rules for EC2-Classic. If you're using the Amazon EC2console, you can modify existing rules, and you can copy the rules from an existing security group toa new security group. Reference: http://docs.amazonwebservices.com/AWSEC2/latest/UserGuide/using-networksecurity.html