We have configured the built-in security groups to have no restriction on all outbound traffic to simplify the setup.