Security group and security policy mapping