This one stumped me for a bit (I also might have completely misunderstood it)!
In order to configure Activity Monitoring for a Security Policy I think we need to right click on the “Activity Monitoring Data Collection” Security Group and select Apply Policy:
From here we can apply activity monitoring to existing (or create new) Security Policy: