New Security Zones policies have been developed to ensure that resources in a security zone comply with security best practices. For example: 

• You can't create or modify a security list to allow traffic to restricted ports in the security zone.
• Load balancers in a security zone can't be public. All load balancers must be private.

You can enable these new policies in your custom security zone recipes.The new policies are not enabled in the Maximum Security Recipe.