This module is loosely based on ec2_group module.  However, rules are
handled slightly differently.  Specific rules are able to be removed vs
removing all "rogue" [1] rules.

[1] Rogue rules are existing security group rules, which are
    not included in the `rules` dict.