Also a slight phrasing improvement to suggest over the second sentence of Tristan's impact description from comment #14:
"Security group changes silently fail to be applied to already running instances, potentially resulting in instances not being protected by the security group."
Also a slight phrasing improvement to suggest over the second sentence of Tristan's impact description from comment #14:
"Security group changes silently fail to be applied to already running instances, potentially resulting in instances not being protected by the security group."
Otherwise looks good to me.