- document conflict with sg rules and sg in-line rules - for this to work, ingress rules need to be computed