always use sec group id in vpc