Customize CIDR for ingress Security Group in RHOCP 4 AWS IPI/UPI

Issue

• By default the security group for ingress contains the inbound rule allowing traffic from 0.0.0.0/0 even if the cluster is private or disconnected.
• How to modify the inbound rule for ingress into the security group to allow traffic from a specific CIDR?
• Is it possible to modify the CIDR for the security group rule related to ingress during installation?
• Due to security concerns, an inbound rule for 0.0.0.0/0 for the ingress controller can't be allowed.