change managed to created, since we're not actively managing the sg and we don't want to scare admins away from locking it down