upon first deployment in new AWS acct, security group was not properly set