This only supports SecurityGroups; I'm assuming I need to use the
GroupId for the SecurityGroup with VPCs.  In addition this doesn't
support SubnetId.