providers/aws: security group VPC ID can be computed in a default VPC