Security groups

what security groups should we assign and how should we configure.