[aws] use account attributes to determine new elb sg