I was happily following along with the "getting started" doc. When I tried define a separate NodeGroup, though, I get an error saying it can't create the ClusterIngressRule, asking for a security_group_id. Do I need to define that, too?