eks_1.0.0

use correct security_group

- (!) breaks connectivity of existing worker nodes until rotated with new launch configuration
- cleaner access to default_iam_role_id