Needed to open port 9300 for ES's auto discovery. However, you get a 'circular dependency' error in cloud formation when referencing a security group from within a security group. Once way around this is to define an empty security group and assign both of them to the LaunchConfig