@dkavanagh : Yes, using the sec group id is the main change here.  That and the removal of the `src_group = self.get_security_group(group_id=group_ids[0])` line, since that's what returned a 404 for the deleted security group.  We don't need to fetch the security group after all, since the rules/grants have all the info we need here.