* description is only required when group state is present also note that AWS requires a non-empty description when creating a security group * clarify description requirement