SecurityGroupRuleAction: "unknown_action" | "accept" | "drop"