use existing security group if present
update AMI's