resources.ec2SecurityGroups is not being processed correctly.

[coretemp]

Changing the description from "a" to "b" and doing a deployment does not result in a change on AWS.

    resources.ec2SecurityGroups.a = {
      inherit accessKeyId region;
      description = "a";
       rules  = [];
};

Correct behavior is that it should.

[benhamad]

You can't change the description from the console nor from the API. The only thing you can do in this case is to create a new security group, with new description and assign it to whatever instances you're using. I don't think we should support something like this. But we can at least inform the user that this is unsupported operation when he change the description.