There are two ways to define AWS security groups in Terraform, and they are not equal