add cache_subnet_group_name param, cache_security_group can be None