Becasue a security group rule can point to anotehr SG with remote-group-id all the SGs must be created before all the rules. Change-Id: Ie1eea0565887c2be30ce4a011b20f6724a59256d