refactor of security groups to allow for vpc and description