This module is loosely based on ec2_group module. However, rules are
handled slightly differently. Specific rules are able to be removed vs
removing all "rogue" [1] rules.
[1] Rogue rules are existing security group rules, which are
not included in the `rules` dict.