I have a security group that contains all the IP range of my company and some ports it should be able to connect to defined in its inbound rule.
I understand that you can use a security group id as a custom source in another security group, which works for connections coming from instances with that security group attached to it.
Does this also mean that IP addresses specified in that security group works also?
So I want an RDS instance to accept connections from my company's IP range, I would just reference the security group and not just the instances/lambdas tagged with that security group ID.
This would save the stress of having to list those IP's any time I need them whitelist, rather I would just reference the security group.
Is this possible?