ec2_group allow empty rules.