Properly match existing security group

If we don't care about `vpc_id` then neither should the code.
Merge pull request #6184 from patrys/patch-1

Properly match existing security group