diff --git a/content/2-preparation/2.6-configure-security-group/_index.md b/content/2-preparation/2.6-configure-security-group/_index.md
index 799048a..26e7a45 100644
--- a/content/2-preparation/2.6-configure-security-group/_index.md
+++ b/content/2-preparation/2.6-configure-security-group/_index.md
@@ -28,6 +28,14 @@ Configure Inbound rules:
 
 ![3.23](/images/2-preparation/3.23.png)
 
+Tương tự cấu hình bổ sung cho nhóm bảo mật cổng riêng
+
+- Chọn **All trafic**
+- Sources: **Anywhere IPv4**
+- Source: **FCJ-Lab-sg-private**
+
+![3.23](/images/2-preparation/3.23.1.png)
+
 Configure Outbound rules:
 
 - Select **All traffic**
diff --git a/content/2-preparation/2.6-configure-security-group/_index.vi.md b/content/2-preparation/2.6-configure-security-group/_index.vi.md
index 9718f14..3467e0e 100644
--- a/content/2-preparation/2.6-configure-security-group/_index.vi.md
+++ b/content/2-preparation/2.6-configure-security-group/_index.vi.md
@@ -21,17 +21,28 @@ Cấu hình Security Group:
 - Description: `Allow access for Internet`
 - Chọn VPC vừa tạo
 
-Cấu hình Inbound rules:
+Cấu hình Inbound rules, tạo inbound một cái trỏ đến public security group, một cái trỏ vào chính private security group:
 
 - Chọn **All traffic**
 - Source: **FCJ-Lab-sg-public**
 
+- Tạo thêm một inbound
+
 ![3.23](/images/2-preparation/3.23.png)
 
+Tương tự cấu hình thêm cho cổng private security group
+
+- Chọn **All traffic**
+- Destination: **Anywhere IPv4**
+- Source: **FCJ-Lab-sg-private**
+
+![3.23](/images/2-preparation/3.23.1.png)
+
 Cấu hình Outbound rules:
 
 - Chọn **All traffic**
 - Destination: **Anywhere IPv4**
+- Source: **FCJ-Lab-sg-public**
 
 ![3.24](/images/2-preparation/3.24.png)
 
diff --git a/static/images/2-preparation/3.23.1.png b/static/images/2-preparation/3.23.1.png
new file mode 100644
index 0000000..a3f2b84
Binary files /dev/null and b/static/images/2-preparation/3.23.1.png differ