I am trying to lock down the security groups for an Accumulo/Hadoop/Zookeeper (AHZ) cluster in Cloudera Manager 5.16. The cluster should not be able to communicate outside of the VPC. I tried using a self-referencing security group that allows all traffic but that seems to have issues (ie: zookeepers arent peering, etc). Is there a way to configure security groups so that he AHZ cluster can not communicate with anything outside of the VPC? Due to environment restrictions, private subnets and NACLs are not an option.