Step 2: Create a Security Group to Use in Your Policy