resource "aws_security_group" "example" {
  name = "allow-all-ingress"

  ingress {
    cidr_blocks = ["0.0.0.0/0"]
-    from_port   = -1
-    to_port     = -1
+    from_port   = 443
+    to_port     = 443
    protocol    = "tcp"
  }
}