Security groups are not part or, or assigned to, subnets. This is a small niggle, but I think this slide and lecture need to be updated to show the security groups outside of the subnets. The lecture does state earlier that security groups are tied to a VPC, so that same rule should be shown on the slide at the end of the lecture.
Thanks for pointing this out. I have passed this on to ACG content team for review.