if we're attaching an external ENI, it should already have sourcedestcheck disabled if necessary