You launched a Linux compute Instance to host the new version of your company website via Apache HTTPS server on HTTPS (port 443).
The Instance is created in a public subnet along with other Instances. The default security list associated to the subnet is:

You want to allow access to the company website from public Internet without exposing websites eventually hosted on the other instances In the public subnet.
Which two actions should you do?