wait on sg creation

when a vpc is fresh, these sg won't exist yet, so make sure they exist
before calling create_instance