aws cli command to update security group