code: func (c *Cloud) getTaggedSecurityGroups() (map[string]*ec2.SecurityGroup, error) {
  	request := &ec2.DescribeSecurityGroupsInput{}
  	request.Filters = c.tagging.addFilters(nil)
  	groups, err := c.ec2.DescribeSecurityGroups(request)
  	if err != nil {
  		return nil, fmt.Errorf("error querying security groups: %q", err)
  	}
  
  	m := make(map[string]*ec2.SecurityGroup)
  	for _, group := range groups {
  		if !c.tagging.hasClusterTag(group.Tags) {
  			continue
  		}
  
  		id := aws.StringValue(group.GroupId)
  		if id == "" {
  			klog.Warningf("Ignoring group without id: %v", group)
  			continue
  		}
  		m[id] = group
  	}
  	return m, nil
  }
docs: // Return all the security groups that are tagged as being part of our cluster