In CloudForms can we develop a catelog item to create Security Group? or some other ways to create security group

Question
#1

In CloudForms can we develop a catalog item or some other way for creating “Security Group” (include some firewall rules to restrict the ports and IP addresses). So that later we can add VMs to this security group.

#2

Regarding implementation, it is probably the same deal as with the previous question: In Cloudforms can we develop a catalog item to create Subnet

Regarding presentation on the UI, you can use Services and GenericObjects
https://manageiq.gitbook.io/mastering-cloudforms-automation-addendum/