Manage AWS security groups in a declarative way