Merge pull request #8912 from zhming0/patch-1

Update security_groups.md

docs/security_groups.md

@@ -8,8 +8,11 @@ Kops will still output any differences in the managed and your own Security Grou
 This is convenient for determining policy changes that need to be made when upgrading Kops.
 **Using Managed Security Groups will not output these differences, it is up to the user to track expected changes to policies.**
 
-*NOTE: Currently Kops only supports using existing Security Groups for every instance group and Load Balancer in the Cluster, not a mix of existing and managed Security Groups.
+NOTE: 
+
+- *Currently Kops only supports using existing Security Groups for every instance group and Load Balancer in the Cluster, not a mix of existing and managed Security Groups.
 This is due to the lifecycle overrides being used to prevent creation of the Security Groups related resources.*
+- *Kops will add necessary rules to the security group specified in `securityGroupOverride`.*
 
 To do this first specify the Security Groups for the ELB (if you are using a LB) and Instance Groups
 Example: