db_security_group is only intended to be used in EC2-Classic Platform. For DB instances in a VPC, we associate VPC security groups instead, when declaring the db_instance resource.