Bug: Redshift module by default has too-restrictive security group

[aaronsteers]

By default the AWS security group for the Redshift catalog module will only allow access from the managed security group. In order to allow external connections, we had to add a manual security group rule to allow incoming traffic on the Redshift port from 0.0.0.0/0 (the 'app' cidr).