feat(cloudformation): apply security-group rules — inline properties and standalone resources (#1993)