security groups can be created into VPCs