Diagram at end of VPC Part 1 lecture is misleading showing security groups inside the subnets

Security groups are not part or, or assigned to, subnets.  This is a small niggle, but I think this slide and lecture need to be updated to show the security groups outside of the subnets.  The lecture does state earlier that security groups are tied to a VPC, so that same rule should be shown on the slide at the end of the lecture.