Since the security group value is coming from the instance page, and the instance cannot run without having at least one security group specified, which is 'default', we should be ok at the moment. But, overall the interaction and the error check on the launch config wizard is incomplete. Figured more work to be done going forward.