Removing the security group rule if its open to 0.0.0.0/0 for RDP and SSH

I have configured an AWS Config rule that removes any security groups inbound rules if thats open to 0.0.0.0/0 for RDP and SSH. That works fine.

But It want that rule to be applied only to all private subnets and not public subnets. Is this possible? Please help how to achieve this?

Thanks