* Create a new security group "ops345sgprivate" to be used later for all VMs except the router.

* Add an inbound rule for ssh from ops345sg only