fix security group ingress/egress types
blow up if creating instance on subnet without AZ