title: AWS CDK - SecurityGroup creation Typescript
body: <p>I'm trying to migrate the follow CloudFormation resource to CDK using typescript:</p>
  
  <pre><code>ALBSecurityGroup:
        Type: AWS::EC2::SecurityGroup
        Properties:
          VpcId: !Ref VPCId
          GroupDescription: !Sub "${Application}-${Environment}-alb-sg"
          SecurityGroupIngress:
          - IpProtocol: tcp
            FromPort: 443
            ToPort: 443
            CidrIp: !Ref SecurityGroupIngressCidr
  </code></pre>
  
  <p>I have tried with this (I don't know how to create the necessary properties):</p>
  
  <pre><code>const albSecurityGroup = new SecurityGroup(this, "ALBSecurityGroup", {
        vpc: Vpc.fromLookup(this, id, {
          vpcId: props.vpcId.stringValue
        }),
        description: appEnv + "-alb-sg"
      })
  </code></pre>
  
  <p>And using Cfn constructor like this (I don't know how to join CfnSecurityGroup with CfnSecurityGroupIngress):</p>
  
  <pre><code>const x = new CfnSecurityGroupIngress(this, id, {
        ipProtocol: "tcp",
        fromPort: 443,
        toPort: 443,
        cidrIp: props.securityGroupIngressCidr
      }); 
  
      const albSecurityGroupCfn = new CfnSecurityGroup(this, id, {
        vpcId: props.vpcId.stringValue,
        groupDescription: appEnv + "-alb-sg"
      });
  </code></pre>
  
  <p>I appreciate your help.</p>