When I try to add a new rule (as per section 1.12 / 1.13) in the interactive lab I get this error.
You may be missing IAM policies that allow ModifySecurityGroupRules. You are not authorized to perform this operation. User: arn:aws:sts::279385274416:assumed-role/voclabs/user4217807=cqfgnvwtamuc is not authorized to perform: ec2:ModifySecurityGroupRules on resource: arn:aws:ec2:us-east-1:279385274416:security-group/sg-01f58b60415ab4845 because no identity-based policy allows the ec2:ModifySecurityGroupRules action. Encoded authorization failure message: r8LIXb61hKR45h61Rht_XYf2kHCmu5MGFPsy4DnTJOtDeHcLMEa4PYBHe-E_Tnw3giBQhgyD13x_yvkfa2WA-3SWm2Fgw8r9fta8XIiC7CyXXkhzPRSu1-eeIB54X1dG5NAqSGSATkc9dAIQE8FkQpEltWkWJ_CPSHcIdEcj9aYRC6_BiY1s3RpR35C4EaxM_8Ma7xx3JcPj49lxxDfpQLralyHWBzZEnJ0V4XBz2XSHV2mS-N28cbR8V0ILEcKE8dX0jky6X50jCemcrLsyo5pqKYedBYQ6Oq-qUkVrAzfPdWg6UEgnrt2JyPI438_FigHDl41ucX6fdI6k-0-NQHdDLy0h6gr1dXnNO5wx5ZV_umIl35X_-kTPW7afSsw2sJQx3rY85h4J8Y6cT3hLEgFolJkCGlGCNnynDDza1HUplcQ84VNV-WbceNWEYZ-4usrznTc77MDaBV1OWuh2nkXnICZVVsHxWwTS9pUfM5rGOXWuqVHVTDX20PNclFKdZ7MiCU7rw6KwtkRDTkfoEGGq-rgr-rEaMkeOI7VwwL7fRRuVZev7XqSTZBCf5LW_KDMgdXxse6KeX2gIl2U5kDahMDNIKs1CSMs7-zjoX3Ae_gsMo9V5_nKGwQfKHaSyCe_Ygfhub1nKrS1hFZNXduhUuPjAJjQzzHmUSh953gnW3FryGupA6p2AyxLwIzINzC_qpVFXQ3n41omdlm61K1jOwSQOsPRszS8Stqip3OSXgFvggBT9RPGhuXvoSVFEG9hnTFBMTENJ1dUs7cIQz8evIO5-TWKE-JiTw-H7w0QWh_gNB3BkuPsnxMyQw_Bqffo9mhwIqApbMUsQx-gNINCjF1v9LYmKs6OmS4owGTAgtGSPS3r5TStOWHJndS8X6eHjq7JEmt1rlPGJ