I'm a bit confused by AWS security groups. I have an application on EC2 that I need accessible to everyone (in theory) in the world. AWS says this though:
"If you use 0.0.0.0/0, you enable all IP addresses to access your instance using SSH or RDP. This is acceptable for the short exercise, but it's unsafe for production environments. In production, you'll authorize only a specific IP address or range of addresses to access your instance."
So, what should I be using for an EC2 instance that I want people to access?