[aws/security_group] update mock search and revoke

* update #normalized_permissions to work with GroupId
* fix #describe_security_groups ip-permission.group* filters