title: Nested Amazon VPC security groups
body: <p>I'm a bit confused on how security group nesting is meant to work in AWS</p>
  
  <p>say I have the following two security groups:</p>
  
  <ul>
  <li><strong>sg-teamA</strong> - IPs of team A members - all tcp</li>
  <li><strong>sg-teamB</strong> - IPs of team B members - all tcp</li>
  </ul>
  
  <p>I then create a sg-RDP group and assign it to an EC2 instance</p>
  
  <p>I add sg-teamA and teamB to the sg-RDP group for RDP (port 3389)</p>
  
  <p>This doesn't work. Why?</p>
  
  <p>I need to add the specific team A and team B member IPs to sg-RDP for them to be allowed to RDP to the VM.</p>
  
  <p>What's the purpose of allowing nested groups/what scenarios is it meant for since it doesn't work for the above?</p>