"Resources": { "ClientSecurityGroup": { "Type" : "AWS::EC2::SecurityGroup", "Properties" : { "GroupDescription" : "for consul-client", "VpcId" : {"Ref" : "VpcId"}, "Tags" : [ {"Key" : "Name", "Value" : "consul-client"} ] } }, "ClientSecurityGroupIngressSerfLanTcpFromServer": { "Type": "AWS::EC2::SecurityGroupIngress", "Properties": { "IpProtocol" : "tcp", "FromPort" : "8301", "ToPort" : "8301", "S