Can someone help me out with this part?

$2\mathrm{.}8-$ Security groups

Create five security groups, each is associated with a tier shown in the architecture

diagram:

$$ ELBSG: for the ELB created above.

$$ WebServerSG: for all the web servers in private subnets.

$$ DBServerSG: for the RDS instance.

$$ NATServerSG: for the NAT server $($only if NAT Gateway is not used$).$

$$ DevServerSG: for the Dev server.

ELBSG, WebServerSG, DBServerSG, and NATServerSG must follow the least$-$privilege

principle, i$.$e$.,$ allowing all traffic from anywhere is NOT acceptable. DevServerSG does

not have to follow the least$-$privilege principle.

Figure $1-$ Architecture diagram