The AWS CLI SG commands are not necessary, kops creates an SG with these ports open to the correct SG by default
git-subtree-dir: contrib/kube-prometheus git-subtree-mainline: 050ca21276696c8603375c699513ec487301ed62 git-subtree-split: 81c0d2f4d3
81c0d2f4d3