draft security groups
simplification of subnets