refactor of security groups to allow for vpc and description

@anfleene check this out for me?
Did you mean to leave this commented out?