start instances with appropriate security group name (no wonder IP access was not being enabled properly)