security_group_ids is optional