There are two options for ingress:  `CidrIp` and `SourceSecurityGroupId`. Should add a `FIXME` or similar to not forget that.