cloud/ec2: extended id option to allow for idempotency based on tags, security groups, security group ids, or images