diff --git a/builtin/providers/aws/structure.go b/builtin/providers/aws/structure.go
index 8116476a28..55d1d55570 100644
--- a/builtin/providers/aws/structure.go
+++ b/builtin/providers/aws/structure.go
@@ -329,6 +329,7 @@ func flattenSecurityGroups(list []*ec2.UserIdGroupPair, ownerId *string) []*ec2.
 		if g.UserId != nil && *g.UserId != "" && (ownerId == nil || *ownerId != *g.UserId) {
 			userId = g.UserId
 		}
+		// userid nil here for same vpc groups
 
 		vpc := g.GroupName == nil || *g.GroupName == ""
 		var id *string
@@ -338,6 +339,9 @@ func flattenSecurityGroups(list []*ec2.UserIdGroupPair, ownerId *string) []*ec2.
 			id = g.GroupName
 		}
 
+		// id is groupid for vpcs
+		// id is groupname for non vpc (classic)
+
 		if userId != nil {
 			id = aws.String(*userId + "/" + *id)
 		}