document how to create / modify security groups in a VPC