Security Group IP addresses

When adding IP addresses or CIDR blocks to VPC security groups - make sure you're using the private IP address and not e.g. a public-facing IP address such as a static one you assigned to a webserver. Only private addresses will work.