EC2 instance does not expose MongoDB ports to the Internet

resource "aws_security_group" "<example_resource_name>" {
  vpc_id = "<example_resource_id>"

  # Critical: restrict MongoDB ports to internal CIDR, not 0.0.0.0/0 or ::/0
  ingress {
    from_port   = 27017
    to_port     = 27017
    protocol    = "tcp"
    cidr_blocks = ["10.0.0.0/8"]
  }

  ingress {
    from_port   = 27018
    to_port     = 27018
    protocol    = "tcp"
    cidr_blocks = ["10.0.0.0/8"]
  }
}

# CloudFormation: restrict MongoDB ports from Internet
Resources:
  <example_resource_name>:
    Type: AWS::EC2::SecurityGroup
    Properties:
      GroupDescription: Restrict MongoDB ports
      VpcId: <example_resource_id>
      SecurityGroupIngress:
        - IpProtocol: tcp
          FromPort: 27017
          ToPort: 27017
          CidrIp: 10.0.0.0/8  # Critical: restricts 27017 to internal CIDR (not 0.0.0.0/0)
        - IpProtocol: tcp
          FromPort: 27018
          ToPort: 27018
          CidrIp: 10.0.0.0/8  # Critical: restricts 27018 to internal CIDR (not 0.0.0.0/0)