Hi,

I'm creating a security group under resources as below:

  rEventTriggerSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      VpcId: 'vpcId'
      GroupDescription: Security group for Event Processor lambda
      SecurityGroupEgress:
        - IpProtocol: "-1"
          CidrIp: 0.0.0.0/0
          Description: "Egress to the kafka"

I'm trying to refer above security group with its logical name as below:

functions:
eastClusterRawEventsProcessorFunction:
name: ${self:custom.config.department}-${self:custom.config.namespace}-EastClusterRawEventsProcessorFunction
handler: src/readInboundEvents.handler
events:
- kafka:
topic: ${self:custom.config.raw_inbound_topic, 'test-topic'}
bootstrapServers: test-server
accessConfigurations:
saslPlainAuth: ${self:custom.cc_region1.consumer_secret, 'test-secret'}
vpcSubnet:
- 'subnet-1'
**vpcSecurityGroup:
- !Ref rEventTriggerSecurityGroup **
When I deploy as above, I'm getting the following error:

Resource handler returned message: "1 validation error detected: Value 'security_group:[object Object]' at 'sourceAccessConfigurations.5.member.uRI' failed to satisfy constraint: Member must satisfy regular expression pattern: [a-zA-Z0-9-/:_+=.@-] (Service: Lambda, Status Code: 400, Request ID: ea19db39-384e-452a-a822-3ac4226f8ff9)" (RequestToken: 77febf5d-0c79-6595-53d3-27412dae925a, HandlerErrorCode: GeneralServiceException)

I would like to know if I'm doing it correctly or not, any help would be greatly appreciated.