Security group rules can reference security groups or cidr ranges. We need to add that ability in the parts