varReference:
- path: spec/securityGroups/groupIds
  kind: SecurityGroupPolicy