code: func filterForIPRangeDescription(securityGroups []*ec2.SecurityGroup, lbName string) []*ec2.SecurityGroup {
  	response := []*ec2.SecurityGroup{}
  	clientRule := fmt.Sprintf("%s=%s", NLBClientRuleDescription, lbName)
  	healthRule := fmt.Sprintf("%s=%s", NLBHealthCheckRuleDescription, lbName)
  	alreadyAdded := sets.NewString()
  	for i := range securityGroups {
  		for j := range securityGroups[i].IpPermissions {
  			for k := range securityGroups[i].IpPermissions[j].IpRanges {
  				description := aws.StringValue(securityGroups[i].IpPermissions[j].IpRanges[k].Description)
  				if description == clientRule || description == healthRule {
  					sgIDString := aws.StringValue(securityGroups[i].GroupId)
  					if !alreadyAdded.Has(sgIDString) {
  						response = append(response, securityGroups[i])
  						alreadyAdded.Insert(sgIDString)
  					}
  				}
  			}
  		}
  	}
  	return response
  }
docs: // filterForIPRangeDescription filters in security groups that have IpRange Descriptions that match a loadBalancerName