[aws] Handle the "phantom" security group that exists for elbs

Aws creates a security group for elbs outside the scope of managable security groups.  Added Mock support for that