using security_group_ids instead of groups