We'd like to be able to access the instances in our VPC from the various public IPs that we have in our corporate network. Is it possible to create security groups (like operator-security-group) and put rules on it that are inherited when applied to instances of an existing security group?
I tried the following configuration and it didn't work: sg-operator (security group created not associate an any instance) port 3389 source my ip: 10.10.10.10
sg-server1 (security group associate an instance) port 3389 source "sg-operator"
It seems to me that rules added in security groups only work when they are directly associated with the instance, is there another way?