convert security groups to security group ids to support vpc