[AWS] dc-vpc-default completely open?!

I just created a new node in AWS with an auto generated security group ‘dc-vpc-default’.

All TCP TCP 0 - 65535 0.0.0.0/0
All UDP UDP 0 - 65535 0.0.0.0/0

Everybody can access any port… is this a bug?