new rules for aws.json location; fix security groups typo