Add rule to allow CF API-related packets to get to AWS instances.

Signed-off-by: Nikhil Gajwani <ngajwani@pivotallabs.com>