AWS cloud formation template for Docker network overlay ports

In the Docker multihost networking (https://docs.docker.com/engine/userguide/networking/), the documentation specified that the following ports needs to be opened on all the Docker host that participates in as a Swarm node:
udp 4789 Data plane (VXLAN)
tcp/udp 7946 Control plane

Q: Does anyone has a sample snipplet that shows how to configure these ports for the AWS Security group for those Docker hosts?

thx