Properly match existing security group

If we don't care about `vpc_id` then neither should the code.