Adding an AWS security group to a an ELB managed by a K8s Service

Cluster information:

Kubernetes version:
Cloud being used: aws
Installation method: kops
Host OS: Linux
CNI and version: Calico v3


Is it safe to add an AWS security group manually to an ELB managed by a K8s Service? Will there be some reconciliation happening which might overwrite this?

Considering we can only use IP CIDRs in loadBalancerSourceRanges in the Service definitions, I don’t see any other option to add a security group to an ELB managed by K8s.