authorize-security-group-ingressauthorize-security-group-ingress and modify-instance-attribute

On a newly created security group, port 22 is not open. before applying it to a instance, add port 22 to the security group.