title: Security group for Application Load Balancer
body: <p>I have some issue with my ELB.
  We are develop some web app and we need to close public access to our app from internet. So about test environment:</p>
  
  <p>example.com -> Application load balancer with route53 -> EC2 in private subnet. </p>
  
  <p>In security group for testing i have opened 0.0.0.0/0 for 80 and 443 (port doesn't matter). My app response and everything works fine.</p>
  
  <p>But i don't need 0.0.0.0/0, so i have changed it to my office IP.
  And my app stop working, because IP from Load balancer in 2 availability zones are not allowed in security group of load balancer. It's very strange.. This IP is not static and i have no guaranties that this IP don't change in 5 min. So, what we have, I ALB doesn't allow his traffic via his IP?</p>