You've provisioned a new Virtual Private Cloud (VPC) network for your development team. To ensure secure access, you want to restrict external connectivity so that only SSH access to resources in the VPC is permitted. How should you set up the necessary firewall rules?