variable "foo" {
    default = "bar";
    description = "bar";
}

resource "aws_security_group" "firewall" {
}

resource aws_instance "web" {
    ami = "ami-123456"
    security_groups = [
        "foo",
        "${aws_security_group.firewall.foo}"
    ]
}