The Cloud Security Group resource has methods to add and manage security groups in a cloud account that is managed by CloudGuard. Among the management operations are methods to add services (rules) to security groups.
Use the Aws Cloud Account resource to set a cloud account to Protected (managed).
Related resources
See also
Attach a Security Group to an Instance using the CloudGuard API