Could you change SECURITY_GROUP to CLUSTER_NAME (it is indeed implemented as a group, but the main semantic here is that it's a name for the cluster)