Policies are applied to security groups. We'll create a default security group , but you'll need to add users to it later. ...