providers/aws: forcenew on SGs for now [GH-299]